I have unauthorized users showing up on my home server, which is running on a QNAP NAS, and they’re showing up as “real” users, but I can tell from talking to those users, and from the IP addresses that they are not who they appear to be.
And note that I do want my server to be available to my friends outside of my network, but I need them to be properly logged in, and I now have multiple examples where this isn’t true (and multiple userIDs).
