I have three Lenovo NAS units on my network, one IX2, and two PX4 all running the original EMC software, latest update, not the one with a known security issue. The IX2 has been up nonstop for about 7 years, the other two something like 1.5 and 2 years.
| 06/15/2022 9:41 pm | | System (svcd) | 1509 |
Invalid attempt to log in as user 'badcred'. |
| 07/15/2022 6:38 pm | | System (svcd) | 1509 |
Invalid attempt to log in as user 'badcred'. |
| 05/25/2022 6:53 pm | | System (svcd) | 1509 |
Invalid attempt to log in as user 'badcred'. |
Above is the first entry on each NAS of hundreds, groups of three a few minutes apart, each group hours apart, same on all three within a minute of same time. Nothing else has happened, Pen testing shows no external vulnerabilities, but it does eat away at my sanity. Nothing obvious is jumping out at me to reveal more details. I don't see any changes to network hardware around the start time, but since then both the switch and router have changed.
Any ideas?