Yesterday I started getting regular notifications from my NAS about multiple failed logins from all over the world. Apparently someone has sicced a botnet on my NAS. Joke's on them, my "admin" account is disabled exactly to foil this type of attack.
Nevertheless, I wrote a script to email abuse reports to the owners of all the IP addresses, letting them know there's a compromised device on their network participating in a botnet.
Don't know if it'll help, but it makes me feel better.
#infosec
Embed Notice
HTML Code
Corresponding Notice
- Embed this notice
Jonathan Kamens (jik@federate.social)'s status on Sunday, 16-Mar-2025 14:22:04 JST Jonathan Kamens