Repeated hack attempts

[BloodyGoodBloke]

In the past few weeks i have been getting emails around attempts to brute force my Admin account.
Thankfully i had disabled the admin account in favour of a non generic account name.
I have also setup 2 factor authentication, Strengthen password, setup account protection, enabled ddos protection. Setup a trusted client list. started blocking the IP's (listed below) , configured autoblock.


Anything else i can be doing to ensure the security of my box?

ips blocked so far.
94.242.249.117
82.102.22.37
89.249.65.28
185.212.171.41
101.93.178.42
interestingly enough doign an IP who is most of them have a connection with M247...

 

[umarmung]

Why on Earth would you have a NAS directly interfacing the Internet? Never heard of VPNFilter?

Use a VPN!

 

[BloodyGoodBloke]

Why on Earth would you have a NAS directly interfacing the Internet? Never heard of VPNFilter?

Use a VPN!

Basically negates the point of having a Synology box if you have to vpn in. I use several features that I require to have certain services exposed to the internet

 

[sfx2000]

Anything else i can be doing to ensure the security of my box?

Yes, don't expose services - NAS boxes are very sweet targets for bad actors...