It is currently Thu Jan 21, 2021 10:21 am
All times are UTC + 8 hours

Lets block them!

Share your awesome tips and tricks here.

Lets block them!

Postby Ubuntux » Sat Apr 18, 2015 4:50 pm

These IPs has tried to gain access to my nas (Yes, my nas is avaible public, but only if you know the passwords! :-D )
I will keep this thread updated with replys. Please share the IPs you caught!

5.79.71.195
24.172.92.178
37.48.74.75
46.158.149.26
61.223.24.72
62.210.99.31
62.210.136.203
62.210.192.84
66.240.192.138
66.240.236.119
71.6.135.131
71.6.165.200
71.6.167.142
77.68.37.155
77.236.97.96
78.186.124.15
79.148.245.79
80.82.64.29
82.221.105.7
83.170.113.200
95.37.13.118
95.37.48.176
95.37.127.64
121.52.145.115
128.199.197.82
151.250.128.150
152.44.159.242
176.45.80.78
178.86.13.234
188.53.103.226
192.99.147.201
193.104.41.56
194.58.88.39
195.88.209.183
195.189.80.21
195.206.253.146
198.20.69.98
198.20.70.114
200.232.163.37
211.1.224.76
212.83.149.193
213.221.131.200
219.141.157.33
220.226.188.152

This thread is not to discuss the usage of black/white list. I tried the black list and i got tired of blocking all other countries but my own and yet still being blocked..
AS-604T & AS-202T
Ubuntux
 
Posts: 87
Joined: Mon May 26, 2014 1:56 am
Location: Denmark

Re: Lets block them!

Postby Ubuntux » Tue Apr 21, 2015 12:40 am

UPDATE!

98.113.167.226
201.220.71.6
41.41.160.67
114.36.62.58
AS-604T & AS-202T
Ubuntux
 
Posts: 87
Joined: Mon May 26, 2014 1:56 am
Location: Denmark

Re: Lets block them!

Postby damien599901 » Tue Apr 21, 2015 4:34 am

what's the goal of this topic?
Storage: AS7004T & AS5002T
Network: FREEBOX REVOLUTION V6
Laptop: Apple MACBOOK Pro OS X El Capitan & Windows 10
Media Player: ASUSTOR NAS with Kodi 16 Beta & HD_Engine 1 (thanks Fathe_Mande)
Portable: iPhone 6S Plus, iPad Mini 2 & iPad Air
damien599901
 
Posts: 558
Joined: Mon Dec 30, 2013 2:53 am

Re: Lets block them!

Postby Kapitein Haak » Tue Apr 21, 2015 3:22 pm

To create a very long list of IPs which cannot be entered manually as the ADM interface probably won't support it. I've had some IPs blocked when I forwarded the ssh port (22) to the NAS temporarily. I used a high port number for SSH access before and never had any blocked IPs, so I moved it back to a high port again (between 1024 and 65535). No more blocked IPs at all, though I only have a few ports forwarded to my NAS below 1024. I also stopped using the default ports for ADM (8000 and 8001). Besides that I now have geoblocking active, which should help as well.

Best regards,
Kapitein Haak.
"What would the world be like without Captain Hook?"
---
"Homo sapiens non urinat in ventum" (A wise man doesn't piss into the wind), only in Amsterdam:
https://www.google.nl/maps/@52.36289,4. ... 312!8i6656
User avatar
Kapitein Haak
 
Posts: 333
Joined: Tue Oct 15, 2013 2:40 pm
Location: Stranded on the Dutch coast.

Re: Lets block them!

Postby damien599901 » Tue Apr 21, 2015 3:36 pm

Ok. I understand now
Thank you very much for your explanation :)
Storage: AS7004T & AS5002T
Network: FREEBOX REVOLUTION V6
Laptop: Apple MACBOOK Pro OS X El Capitan & Windows 10
Media Player: ASUSTOR NAS with Kodi 16 Beta & HD_Engine 1 (thanks Fathe_Mande)
Portable: iPhone 6S Plus, iPad Mini 2 & iPad Air
damien599901
 
Posts: 558
Joined: Mon Dec 30, 2013 2:53 am

Re: Lets block them!

Postby Ubuntux » Thu Apr 23, 2015 2:00 am

The point of this thread is a beginning of blocking IPs that try to access nas servers.

I have requested Asustor to add a feature named "Smart IP blocking". This would be an app that would be connected to a main server and all other Asustor servers would as well. If we then say an IP tries to access 10 or 100 nas servers they will alert the rest and the IP will be blocked so it will be blocked on the rest. I dont change port.. Why run from something you can block?
I tried the geo blocking, but even tho i whitelist my whole country i still get issues with IPs in my own country.. and thats not really that much interesting... also by blocking them we would send a signal.. maby this would be smarter from the router, but they dont offer this kinda blocking tool..
AS-604T & AS-202T
Ubuntux
 
Posts: 87
Joined: Mon May 26, 2014 1:56 am
Location: Denmark

Re: Lets block them!

Postby sosad » Mon Apr 27, 2015 1:59 pm

so I moved it back to a high port again (between 1024 and 65535). No more blocked IPs at all, though I only have a few ports forwarded to my NAS below 1024. I also stopped using the default ports for ADM (8000 and 8001). Besides that I now have geoblocking active, which should help as well.
sosad
 
Posts: 1
Joined: Mon Apr 27, 2015 1:27 pm

Re: Lets block them!

Postby PinguMann » Thu May 26, 2016 9:06 am

This is a very laborious way to do a fundamental Admin job.

Check my reply in the post: "Security Concerns - Log File" -- http://forum.asustor.com/viewtopic.php?f=49&t=6591#p24742

It eliminates lists and such Admin intensive "work-arounds".
It requires Command Line Interface CLI access with Terminal/PuTTY to the NAS though - which can be learned ...

:-)
PinguMann
PinguMann
 
Posts: 4
Joined: Wed May 18, 2016 11:55 am

Return to Tips & Tricks

  • You cannot post new topics in this forum
    You cannot reply to topics in this forum
    You cannot edit your posts in this forum
    You cannot delete your posts in this forum
    You cannot post attachments in this forum
  • Who is online

    Users browsing this forum: No registered users and 1 guest