# Bot "nets" trying to attack again

**URL:** <https://forums.plex.tv/t/bot-nets-trying-to-attack-again/945526>\
**Category:** General Discussions\
**Tags:** server-synology\
**Created:** [November 4, 2026, 3:31am UTC](https://forums.plex.tv/t/bot-nets-trying-to-attack-again/945526 "2026-11-04T03:31:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![PunkleJones](https://avatars.discourse-cdn.com/v4/letter/p/c37758/32.png) [@PunkleJones](https://forums.plex.tv/u/PunkleJones)\
**Post date:** [November 4, 2026, 3:31am UTC](https://forums.plex.tv/t/bot-nets-trying-to-attack-again/945526/1 "2026-11-04T03:31:11Z")

</div>

![Screenshot (48194)](https://global.discourse-cdn.com/plex/original/4X/f/8/d/f8da9888f6f7680d57accf1ad885ce0c7617dec3.jpeg)

 ![Screenshot (48195)](https://global.discourse-cdn.com/plex/original/4X/f/7/7/f779d1989ca9f6364cbd6ec40476b7520dda837c.jpeg)

been a while since last, over a year i think. Not even noticing it at all 🙂  
Many services used in their list, non of them plex funnily enough 😃

---

<div class="post-metadata">

**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\
**Post date:** [November 4, 2026, 6:36am UTC](https://forums.plex.tv/t/bot-nets-trying-to-attack-again/945526/2 "2026-11-04T06:36:20Z")

</div>

Probably nothing to do with Plex but with Synology in general.

> **[C3RB3R (Cerber) ransomware hits Synology NAS devices through DSM flaws...](https://pwn.watch/i/synology-dsm-cerber-c3rb3r-ransomware-cve-2026-13639-13684)**
>
> \[critical · live · patched\] Since October 2026, 360's anti-ransomware team has handled multiple ransomware attacks on Synology NAS devices by C3RB3R, a variant of the Cerber ransomware family. 360 says the attackers get in through CVE-2026-13639...

---

<div class="post-metadata">

**Author:** ![Fluamsler](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/fluamsler/32/163641_2.png) [@Fluamsler](https://forums.plex.tv/u/Fluamsler)\
**Post date:** [November 4, 2026, 11:26am UTC](https://forums.plex.tv/t/bot-nets-trying-to-attack-again/945526/3 "2026-11-04T11:26:00Z")

</div>

Here are some tips for more security

- Use another username with admin rights (admin and administrator are the most attacked names) and disable “admin” after it.
- Do not forward the DSM ports. Use the reverse proxy and only forward port 80 and 443. Port 5000 and 5001 are often attacked.
- Use strong and unique passwords. Activate two-factor authentication.
- Activate the firewall: white-ist your network (and static IP) and only allow DSM from your (and your Plex user) country.
- Enable auto block of IP and activate the account protection.
- Ban IP’s after 2 failed attempts within 30 minutes for 7 days.
- Always run DSM at the latest version.

Also activate the 2-factor authentication on your Plex account.

Hope this helps! 😀