TerraMaster Forum

Hi, I was going over system logs for my F2-210 and noticed "Web Logout Successful!" in the Event column. I don't see a corresponding log-in for the IP's that the event corresponds to so I was curious what it even means. Note that they're associated with IPs outside my home network so I'm doing some digging on the origins but curious about what the message is supposed to describe.

Any have any insights that would be helpful?

Thanks in advance!

I get those from internal network addresses, sometimes with a visible login-logout pair, sometimes just the logout. I did recently find 2 from outside addresses, one in South Africa, one in China. The odd part is that the server has no apps other than what comes when TOS is installed.

I have to check my firewall logs to see what's going on.

I can't explain it either.

Hello
Do you mean the HTTP logs? Our system will be automatically logged out if it is not operated for a period of time. If not, please give us the screenshot to check it out.

Yes, it's an http log. See the attached example of the log entry. I looked up the IP and it was from a hosting service that's considered sketchy so my concern grows.

Is this an indication of an unsuccessful attempt to gain entry via a port?

Thanks for the reply but I guess I'm having a hard time understanding what you mean.

Why would my nas log out with a specific unfamiliar IP if I (or anyone else) were never logged at that time? Also, As you can see, there's no user associated with that action and the port is foreign to me.

Would you happen to know what service uses that specific port since I've already accounted for the ports that I've either manually opened or are already associated with specific services/apps installed. There are other log entries with different IP's and ports with the same description so I want to make sure nothing funky is going on.

Thanks again!

Hi! Please confirm that the IP is not you logging in. Set firewall rules and turn off remote access.

I also have seen these kinds of entries in my system logs. I have remote access turned off and have since finding the strange IPs created firewall rules to block them. But I'm still confused as to what the message "Web Logout Successful!" means. Did these IPs actually get into my nas? Or did they just attempt a connection?

For me, a successfull logout means that they where in... to analysing try Wireshark on your Pc but you can scan you complete Network. Or install a Honeypot.

Ya thats what I would assume too. But why is the log in from the IPs not also logged? Terra support any thoughts?