Hi everyone,

 

Yesterday I noticed some very strange behavior in my unraid logs. I initially got a warning from my firewall that there was two mac address's on the same IP as my server. Later reading through the logs there is a lot of things I don't understand and it's spooked me a little.

 

I have various dockers running including a cloud flare tunnel for Overseerr. I had wireguard turned on but not anymore, I turned it off when I noticed this.

 

I have copmpared against another friends logs and they are much smaller than mine although I'm running backups and auto updates for my dockers.

 

Being a novice in linux novice, I'm not sure if what I'm reading is legit or if I've been compromised. Can someone please have a read through and help.

 

Thanks to anyone who can.

Unraid syslog.log

I'd suggest posting the exact message from your firewall (also, what firewall is it?) as well as your diagnostics.zip file (from Tools -> Diagnostics)