First of all, read the related article How To Disable SSH. In this page, you can find a list of IPs that will occasionally try to log into your Synology via SSH. This blacklist has been carefully prepared by Marius Lixandru over several years of investigations. Below, you will find instructions to implement the list and add it into your synology DSM. This block list is completely compatible with the Synology Router RT1900ac and RT2600ac (follow the instructions below to add it on the router). The ip blacklist will be updated every Sunday of the week. Remember, when you upload the file, upload it with the same name shown below: deny-ip-list
Download the latest updated Blacklist (5178 items):
deny-ip-list (Updated 20.05.2019) (changelog)
Contact me to Contribute to the malicious ip block list.
How to add ip block list on Synology NAS? Control Panel / Security / Account / Allow/Block List
Once you have clicked Allow/Block List button, go to Block List / Create / Import IP address list and insert the file you have downloaded from mariushosting (at the top of this page).
After the list is imported, you will be able to see this:
Now everything should work like a charm. Your deny ip list is updated with the latest mariushosting definition.
You can also import the list to your Synology Router RT1900ac and RT2600ac. The sequence is Network Center > Security > Auto Block > Allow/Block List (Follow the instructions in the image below).
Image Credit: Paul Barrett