Re: reikia pagalbos apsaugoti NAS [DMZ @ 2014-01-30 21:10:29]

Tema: Re: reikia pagalbos apsaugoti NAS
Autorius: DMZ
Data: 2014-01-30 21:10:29
Turiu irgi, guesta leidzia bent jau disablint tai 100%, trint pabijojau vien 
tam kad petestuot :) Anyway, toks optionsas yra. O tas accessas panasu kad i 
data share prisijunge, ar cia nebus tavo pacio kompas accessina tuos 
folderius (video/vaikai) nes ta jis irgi logina?
Dar variantas - atjunk telneta jei nenaudoji, nebesibels. Btw, mane irgi 
saudo taip kad panasu kad problema globalesne :)


"Darka" <hdd@hdd.lt> wrote in message 
news:lc82bi$lgi$1@trimpas.omnitel.net...
>
>
> Sveiki,
>
> yra Synology NAS. Pastoviai esu atakuojamas is ivairiu isoriniu IP, 
> ivairiais protokolais. Ijungiau Auto Block funkcija (5 attempts within 5 
> min), bet tie padlos is karto pakeite strategija ir jungiasi reciau ir po 
> maziau kartu.
> Pirmus penkis nublokavo dar spalio men. (buvau ramus ir nebetikrinau 
> logu), o pasirodo, jais visas blokavimas ir apsiribojo.
> Ir kas blogiausia, ne tik bando, bet ir pasijungia. Pvz.:
> Information    Connection    2014/01/18 20:28:22    guest    CIFS client 
> [guest] from [EQUIPO2(IP:190.79.139.22)] accessed the shared folder 
> [video].
> Warning    Connection    2014/01/20 08:29:05    SYSTEM    User [?] from 
> [134.147.203.117] failed to log in via [TELNET] due to authorization 
> failure.
> Information    Connection    2014/01/23 16:25:39    guest    CIFS client 
> [guest] from [LUISLENA-PC(IP:95.95.68.19)] accessed the shared folder 
> [vaikai].
> Information    Connection    2014/01/23 13:45:17    guest    CIFS client 
> [guest] from [LUISLENA-PC(IP:95.95.68.19)] accessed the shared folder 
> [video].
> Information    Connection    2014/01/23 03:54:23    guest    CIFS client 
> [guest] from [LUISLENA-PC(IP:95.95.68.19)] accessed the shared folder 
> [video].
> Information    Connection    2014/01/23 03:54:17    guest    CIFS client 
> [guest] from [LUISLENA-PC(IP:95.95.68.19)] accessed the shared folder 
> [vaikai]
> Warning    Connection    2014/01/26 11:56:27    SYSTEM    User [root] from 
> [78.180.210.31] failed to log in via [TELNET] due to authorization 
> failure.
> Warning    Connection    2014/01/26 04:24:05    SYSTEM    User [root] from 
> [78.175.230.153] failed to log in via [TELNET] due to authorization 
> failure.
> Warning    Connection    2014/01/28 10:38:32    SYSTEM    User [root] from 
> [201.216.191.174] failed to log in via [TELNET] due to authorization 
> failure.
> Warning    Connection    2014/01/28 08:22:31    SYSTEM    User [root] from 
> [78.187.159.59] failed to log in via [TELNET] due to authorization 
> failure.
> Warning    Connection    2014/01/28 07:26:16    SYSTEM    User [?] from 
> [134.147.203.117] failed to log in via [TELNET] due to authorization 
> failure.
> Warning    Connection    2014/01/28 05:29:18    SYSTEM    User [root] from 
> [189.204.113.203] failed to log in via [TELNET] due to authorization 
> failure.
> Warning    Connection    2014/01/28 01:36:37    SYSTEM    User [root] from 
> [122.170.0.204] failed to log in via [TELNET] due to authorization 
> failure.
> Warning    Connection    2014/01/28 01:21:01    SYSTEM    User [root] from 
> [59.149.157.231] failed to log in via [TELNET] due to authorization 
> failure.
> Warning    Connection    2014/01/27 21:28:33    SYSTEM    User [root] from 
> [5.53.136.16] failed to log in via [TELNET] due to authorization failure.
> Warning    Connection    2014/01/27 21:23:25    SYSTEM    User [root] from 
> [82.113.40.133] failed to log in via [TELNET] due to authorization 
> failure.
>
>
> tie kur "failed to log" tai dar tiek to, bet tie kurie pasijunge tai mane 
> gasdina, ir ko visai nesuprantu, kad butent is to IP pries tai loguose 
> nera jokio skanavimo... Kokiu budu jie taip eme ir atspejo passw?
>
>
> Darius
>