This seems to be similar to Robbie's post from May 11th. (Brute Force Password Attack - but NAS has no external access set)
I've posted this on the Synology site but thought I'd post here as well.
In the last 48 hours I’ve had over 6,4000 failed login attempts (from overseas countries) on my DS220+ NAS drive. I haven’t seen this level of activity in a couple of years. I guess I’m more security conscious now.
I’ve always had the admin and guest accounts disabled, use a complex password and have MFA enabled. I do always ensure that latest patches/updates are applied.
Based on the first set of failed logins, I’ve enabled auto-block on my NAS and on my RT6600 router, although there’ no login attempts there. I've also blocked the source IP range on the firewall on both the router and NAS.
I use NAS for WebDav data access.
Some questions:
I've posted this on the Synology site but thought I'd post here as well.
In the last 48 hours I’ve had over 6,4000 failed login attempts (from overseas countries) on my DS220+ NAS drive. I haven’t seen this level of activity in a couple of years. I guess I’m more security conscious now.
I’ve always had the admin and guest accounts disabled, use a complex password and have MFA enabled. I do always ensure that latest patches/updates are applied.
Based on the first set of failed logins, I’ve enabled auto-block on my NAS and on my RT6600 router, although there’ no login attempts there. I've also blocked the source IP range on the firewall on both the router and NAS.
I use NAS for WebDav data access.
Some questions:
- Is anyone else experiencing higher unauthorized access attempts recently?
- Is there anything else I can do to increase the level of security?
- I know I’ll need to tighten source IP on WebDave but given that I access the NAS from different locations and devices, what’s a good way of doing this? (Home router IP is relatively static but cottage router IP is dynamic from the provider and I can’t get a dedicated static IP from either. Also, I sometimes need access from my mobile phone.)
This post includes affiliate links. As an Amazon Associate, SynoForum.com may earn a commission if you make a purchase — at no extra cost to you.
It helps support our community! Learn more...
