My NAS is generating a lot of outgoing firewall security threats tagged as “ET P2P BitTorrent DHT ping request.” The destinations are to every country imaginable.
Any idea what is generating this so that I can shut it down?
I have firewall protections that block request to high-risk countries, but this is highly unusual and generating pings every few minutes.
Hardware: TS-251D / 2 Seagate drives (ST4000VN008-2DR166) / Firmware QTS 5.2.7.3297
DHT traffic is probably from either download station or another torrent client you have running.
I tried to open Download Station and I got a message that said “Access denied” and I’m the admin. I since force removed Download Station as an App.
I wonder if it was compromised; never got notice from malware scans of any issies.
Removed Download Station and the ping request stopped. Thx
Is your NAS web exposed (port forwards or upnp)? If not, a compromised NAS is unlikely
Download station will share files that are currently being downloaded. I’ve seen it happen. Mine are always moved out of the temporary location where I have them stored for downloading. But I see them being shared as a peer while they are accessible by Download Station….