短暂开了一下Telnet和SSH，就被疯狂扫描，但看不见扫描者的IP

        因为迅雷不能用了，想试试远程调一下，短暂开了一下Telnet、SSH和22端口，结果都还没开始远程调试，家里路由器的IP地址[192.168.2.1] 就被群晖自己封锁了，回到家，从内网进入日志事件，发现这扫描的也太厉害了，如下红色都是非法扫描的，直接导致了IP封锁。
       但问题是，为什么群晖记录不到这些扫描者的IP地址，包括我自己从公司远程登陆也显示的是路由器的网关地址，如果只封锁扫描者的IP地址，也不至于路由器被封锁，这就影响了我正常远程的登陆，请问如何解决这种问题。

优先层级	日志	日期 & 时间	用户	事件
Information	连接	2017/07/20 08:43:24	admin	User [admin] logged in from [192.168.2.1] via [DSM].
Warning	连接	2017/07/20 07:23:46	SYSTEM	User [root] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/20 07:21:05	SYSTEM	User [vargrant] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/20 07:20:57	SYSTEM	User [vargrant] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 23:10:08	SYSTEM	User [steam] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 22:58:37	SYSTEM	User [steam] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 21:59:45	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 21:05:20	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 21:00:21	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Information	连接	2017/07/19 20:49:47	TV	CIFS client [TV] from [192.168.2.199(IP:192.168.2.199)] accessed the shared folder [video].
Information	连接	2017/07/19 20:28:05	TV	CIFS client [TV] from [JCIFS0_1_05(IP:192.168.2.199)] accessed the shared folder [video].
Information	连接	2017/07/19 20:28:05	TV	CIFS client [TV] from [192.168.2.199(IP:192.168.2.199)] accessed the shared folder [video].
Information	连接	2017/07/19 20:28:04	TV	CIFS client [TV] from [192.168.2.199(IP:192.168.2.199)] accessed the shared folder [home].
Information	连接	2017/07/19 20:28:03	TV	CIFS client [TV] from [JCIFS0_1_05(IP:192.168.2.199)] accessed the shared folder [video].
Information	连接	2017/07/19 20:28:03	TV	CIFS client [TV] from [192.168.2.199(IP:192.168.2.199)] accessed the shared folder [video].
Information	连接	2017/07/19 20:28:03	TV	CIFS client [TV] from [JCIFS0_1_05(IP:192.168.2.199)] accessed the shared folder [下载].
Information	连接	2017/07/19 20:28:03	TV	CIFS client [TV] from [192.168.2.199(IP:192.168.2.199)] accessed the shared folder [下载].
Information	连接	2017/07/19 20:28:03	TV	CIFS client [TV] from [JCIFS0_1_05(IP:192.168.2.199)] accessed the shared folder [home].
Information	连接	2017/07/19 20:28:02	TV	CIFS client [TV] from [JCIFS0_1_05(IP:192.168.2.199)] accessed the shared folder [music].
Information	连接	2017/07/19 20:28:02	TV	CIFS client [TV] from [192.168.2.199(IP:192.168.2.199)] accessed the shared folder [music].
Information	连接	2017/07/19 20:28:02	TV	CIFS client [TV] from [JCIFS0_1_05(IP:192.168.2.199)] accessed the shared folder [互联网资源工具].
Information	连接	2017/07/19 20:28:02	TV	CIFS client [TV] from [192.168.2.199(IP:192.168.2.199)] accessed the shared folder [互联网资源工具].
Information	连接	2017/07/19 20:27:16	admin	User [admin] logged in from [192.168.2.2] via [DSM].
Warning	连接	2017/07/19 20:19:04	SYSTEM	User [root] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:31:10	SYSTEM	User [root] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:31:05	SYSTEM	User [debian] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:31:04	SYSTEM	User [root] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:30:59	SYSTEM	User [root] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:30:55	SYSTEM	User [root] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:30:50	SYSTEM	User [root] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:30:44	SYSTEM	User [root] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:25:11	SYSTEM	User [steam] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 18:19:13	SYSTEM	User [vargrant] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 17:48:41	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 17:48:35	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 17:48:29	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 17:48:23	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 17:48:17	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.
Warning	连接	2017/07/19 17:48:13	SYSTEM	User [aaron] from [192.168.2.1] failed to log in via [SSH] due to authorization failure.

看来耍难倒人了

你的路由器做的NAT有问题吧?

把外网进来的IP NAT成了网关地址

或者你是二级路由器?

孤城的守夜人 发表于 2017-7-20 13:08
你的路由器做的NAT有问题吧?

把外网进来的IP NAT成了网关地址

不是二级路由，用的是斐讯K2，下挂一个交换机，内网都是走的交换机

之前ROS没关端口也是一直被尝试登陆，后来关了就没事了

你设备认为攻击源为路由器的IP,应该是你端口映射的时候做错了吧?


外网IP访问内外设备的时候被NAT为了路由器的LAN地址