1. 服务器/VPS/主机用户Telegram电报群: https://t.me/openos
    黑群晖 Synology Telegram电报群: https://t.me/nasfan
    排除公告

群晖安全问题提醒

本帖由 寻千与千寻 于 2022-07-31 发布。版面名称：群晖 Synology DSM

  1. 寻千与千寻

    寻千与千寻 Member

    注册:
    2020-07-29
    帖子:
    131
    2022-07-31 #1
    最近发现群晖经常被不明ip尝试登陆，一看日志吓一跳。
    从7月26号开始就不停的有异常的登录现象，虽然没成功。
    列表看附件。大家尽量学学针对近期NAS频繁中招勒索病毒，建议你立即去做！ - GXNAS博客这个博主的操作来一遍。
    好多ip肉鸡。。。其中包括群晖和威联通。

    Warning 连接 2022/07/30 16:46:28 admin User [admin] from [151.203.78.176] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:45:42 admin User [admin] from [134.90.251.108] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:44:49 admin User [admin] from [106.240.25.19] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:43:28 admin User [admin] from [220.76.236.57] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:42:48 admin User [admin] from [14.167.245.182] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:41:00 admin User [admin] from [217.133.83.22] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:40:12 admin User [admin] from [125.229.57.33] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:38:37 admin User [admin] from [123.194.210.79] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:38:10 admin User [admin] from [46.33.129.191] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:36:38 admin User [admin] from [194.118.247.182] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:35:23 admin User [admin] from [180.224.9.29] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:34:12 admin User [admin] from [27.131.160.26] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:32:58 admin User [admin] from [27.131.160.26] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:32:27 admin User [admin] from [89.10.241.246] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:30:58 admin User [admin] from [222.69.92.52] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/30 16:30:08 admin User [admin] from [46.208.5.142] failed to sign in to [DSM] via [password] due to authorization failure.


    Warning 连接 2022/07/29 06:03:57 peter User [peter] from [1.228.175.32] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 06:03:41 accountant User [accountant] from [27.223.5.166] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 06:02:07 daniel User [daniel] from [46.208.5.142] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 06:01:32 suzhou User [suzhou] from [203.243.43.184] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 06:00:32 guanwu User [guanwu] from [125.227.83.237] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 06:00:15 accountant2 User [accountant2] from [163.152.214.150] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:59:37 xray User [xray] from [183.108.76.184] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:58:20 price User [price] from [116.17.140.29] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:57:48 bd User [bd] from [125.89.66.98] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:56:22 red User [red] from [217.24.239.250] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:56:02 sun User [sun] from [31.41.104.66] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:54:56 stock User [stock] from [211.229.178.218] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:54:08 qc User [qc] from [217.91.223.28] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:52:52 alex User [alex] from [81.94.73.180] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:52:29 it User [it] from [77.20.50.211] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:51:56 emby User [emby] from [60.228.164.140] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:50:51 manager User [manager] from [71.112.149.142] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:50:32 scan User [scan] from [101.80.24.78] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:48:58 master User [master] from [49.174.51.187] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:48:49 user1 User [user1] from [175.199.171.127] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:47:45 leyan User [leyan] from [122.225.42.210] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:47:00 plex User [plex] from [115.78.234.215] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:45:34 plex User [plex] from [211.196.38.227] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:44:56 plex User [plex] from [188.155.81.11] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:44:38 plex User [plex] from [92.188.152.123] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:43:18 plex User [plex] from [221.12.54.58] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:43:16 plex User [plex] from [27.154.215.124] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:41:37 plex User [plex] from [14.52.82.4] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:41:18 plex User [plex] from [73.71.1.165] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:40:05 plex User [plex] from [118.250.133.14] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:39:28 plex User [plex] from [188.192.141.220] failed to sign in to [DSM] via [password] due to authorization failure.
    Warning 连接 2022/07/29 05:35:35 plex User [plex] from [188.195.34.47] failed to sign in to [DSM] via [password] due to authorization failure.
     
  2. IV16SL

    IV16SL New Member

    注册:
    2018-12-05
    帖子:
    10
    2022-07-31 #2
    没有发现这个问题，要么你被扫了，要么检查下自己的电脑或者其他设备有没有什么软件暴露了你的端口，或者检查路由设定。然后你可以开启自动封锁。
     
  3. llm2022

    llm2022 New Member

    注册:
    2022-07-30
    帖子:
    3
    2022-07-31 #3
    昨天上午开机，就发现有IP地址在尝试登入了。
     
  4. 寻千与千寻

    寻千与千寻 Member

    注册:
    2020-07-29
    帖子:
    131
    2022-07-31 #4
    被人扫描了。毕竟开了端口外网访问。已经封锁了一堆了。
     
  5. sumwah

    sumwah Member

    注册:
    2020-04-18
    帖子:
    142
    2022-07-31 #5
    打开双重验证。