Glancing at our router last night I noticed that there was traffic on our Internet connection and to/from our NAS drive, and it wasn't caused by either of us. Further poking around in logs showed that some bugger was repeatedly probing the NAS over the FTP port, being denied access every second or two as they presumably cycled through a list of common passwords.

Tracing the IP address of the source of the attack (hey, man, it is an attack; I feel violated...) suggested that the perpetrator was based in Shanghai – apparently rendered 上海 if your browser will show the pictograms properly – hence the tongue in cheek, mock-hysterical title to this post.



I ran a port scan on the perpetrator's computer, and he had a few ports open as well, including FTP, but at this point I decided to take the moral high ground and leave him be. That, added to the fact that I wouldn't have the faintest idea of how to go about exploiting an open TCP port.

Needless to say, a stop has been put to the incoming attack.