Constant Admin login failures from different IP addresses
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Constant Admin login failures from different IP addresses
as soon as the nas is behind a nat device (no matter if router or wifi mesh) no outside access should be possible without port forwarding
-
- Getting the hang of things
- Posts: 50
- Joined: Tue Nov 02, 2010 9:49 pm
-
- Know my way around
- Posts: 126
- Joined: Fri Dec 18, 2015 2:43 pm
Re: Constant Admin login failures from different IP addresses
Go to Control Panel, System, System Logs, System Connection Logs... Make sure you have it enabled...
-
- New here
- Posts: 2
- Joined: Sun Jun 23, 2019 11:19 pm
Re: Constant Admin login failures from different IP addresses
Changing the connection ports solved my problem, no more intrusion attempts.
-
- New here
- Posts: 7
- Joined: Fri Jan 20, 2012 4:49 am
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Constant Admin login failures from different IP addresses
this can happen if you dont disable this:
viewtopic.php?f=50&t=160274
check into cloudlink ..no direct exposure (but limited in speed)
viewtopic.php?f=50&t=160274
check into cloudlink ..no direct exposure (but limited in speed)
-
- New here
- Posts: 7
- Joined: Fri Jan 20, 2012 4:49 am
Re: Constant Admin login failures from different IP addresses
Worked. UPnP disabled on the router, auto router config disabled on QNAP. Access to the NAS from the internet still possible using myQNAP-cloud service. Should be safe(r) now. Thanks!
-
- New here
- Posts: 5
- Joined: Fri Aug 03, 2012 1:53 am
Re: Constant Admin login failures from different IP addresses
Had the same issue. Every 30 seconds a login attempt from a different ip.
Not forwarding port 8080 (NAS web) solved it for now. Have some other ports that do need to be forwarded.
Not forwarding port 8080 (NAS web) solved it for now. Have some other ports that do need to be forwarded.
-
- Experience counts
- Posts: 2415
- Joined: Wed Jan 08, 2014 10:34 pm
Re: Constant Admin login failures from different IP addresses
So no longer letting the entire internet have access to your NAS.Not forwarding port 8080 (NAS web) solved it for now. Have some other ports that do need to be forwarded.
A prudent move.
TS-431+ for storage and media and a bunch of IP cams under Surveillance Station. TVS-473 as files backup and QVR Pro.
-
- Starting out
- Posts: 19
- Joined: Sat Mar 31, 2018 1:05 pm
Re: Constant Admin login failures from different IP addresses
I've been getting this as well. Is there a way to block any IP addresses that try to log in using the "admin" account? I've disabled the admin account purposely for this reason and log in using a different username, but it would be easier to simply block all attempts with the UN "admin" instead of hoping they try to log in twice within a 60 minute period so they can be auto blocked. They're very smart about how much time they space between attempts.
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Constant Admin login failures from different IP addresses
do not expose your NAS ..as soon as an exploit is available, you get no notice, just an infection