Persistant login failures from 127.0.0.1
-
- First post
- Posts: 1
- Joined: Sun Dec 30, 2012 10:07 pm
Persistant login failures from 127.0.0.1
Is anyone else having an issue with login failures from the loopback address 127.0.0.1
I notice on start-up that there are two attempts to login with the username showing as a question mark in a diamond via HTTP.
They show up on start-up and then at other random intervals. I've done an advanced reset and they are still appearing.....any ideas?
Not sure if this is a bug or someone has a malicious script running on it.
Cheers,
Ben
I notice on start-up that there are two attempts to login with the username showing as a question mark in a diamond via HTTP.
They show up on start-up and then at other random intervals. I've done an advanced reset and they are still appearing.....any ideas?
Not sure if this is a bug or someone has a malicious script running on it.
Cheers,
Ben
-
- New here
- Posts: 8
- Joined: Sun Jan 11, 2015 11:15 pm
Re: Persistant login failures from 127.0.0.1
Hi Ben,
I am seeing a similar login failure that just started today on my machine. It is login failures to http which is disabled on my machine. Have you had an success figuring out what is going on?
Thanks,
Eric
I am seeing a similar login failure that just started today on my machine. It is login failures to http which is disabled on my machine. Have you had an success figuring out what is going on?
Thanks,
Eric
-
- Starting out
- Posts: 13
- Joined: Fri Jun 01, 2012 4:43 pm
Re: Persistant login failures from 127.0.0.1
Hi all,
I'm also experiencing this. I dont know whats changed or whats trying to login but if you hear of anything could you please let me know. Thanks and much appreciated......
Sam
I'm also experiencing this. I dont know whats changed or whats trying to login but if you hear of anything could you please let me know. Thanks and much appreciated......
Sam
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Persistant login failures from 127.0.0.1
just stop exposing your nas (ssh,web login,etc) to the internet..problem solved
-
- Starting out
- Posts: 13
- Joined: Fri Jun 01, 2012 4:43 pm
Re: Persistant login failures from 127.0.0.1
Dolbyman, I dont see how an internal IP address attempting HTTP login is related to external WAN activity? Can you elaborate?
Thanks
Thanks
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Persistant login failures from 127.0.0.1
post screenshots of the messages
-
- Starting out
- Posts: 13
- Joined: Fri Jun 01, 2012 4:43 pm
Re: Persistant login failures from 127.0.0.1
Please find the requested screen shot.
You do not have the required permissions to view the files attached to this post.
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Persistant login failures from 127.0.0.1
do those attempts stop when not exposing to the internet?
-
- Starting out
- Posts: 13
- Joined: Fri Jun 01, 2012 4:43 pm
Re: Persistant login failures from 127.0.0.1
I leave my NAS on 24/7 and they seem to be random in attempt. They only started in March and my NAS had always been exposed to the internet before then. I do not know a way of re-creating them so even if I turned off the internet connectivity, I wouldn't know if it was going to try and login again.... btw, thanks for the help.....
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Persistant login failures from 127.0.0.1
just make sure no uneeded ports are forwarded (manually or via upnp)
-
- Starting out
- Posts: 13
- Joined: Fri Jun 01, 2012 4:43 pm
Re: Persistant login failures from 127.0.0.1
Would I be able to see the list of ALL open ports in the System Status -- System Service window, or would there be more that I need to find out some other way?
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Persistant login failures from 127.0.0.1
forwarded ports would be on your router
additionally check the "auto router config" on the nas
additionally check the "auto router config" on the nas
-
- Starting out
- Posts: 13
- Joined: Fri Jun 01, 2012 4:43 pm
Re: Persistant login failures from 127.0.0.1
Thanks, I had to manually add any port forwards on the PlusNet router I have so anything on there I know I need, regarding the auto router config, this is a bit more perplexing. Attached is a screen shot which will help show my system but suffice to say that the web interface does take me to the general "How to make a web page" page and I know the FTP port is forwarded from my router and this works. As for the RTRR I don't think I need this turned on but I'm not sure what its used for.
You do not have the required permissions to view the files attached to this post.
- dolbyman
- Guru
- Posts: 35243
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: Persistant login failures from 127.0.0.1
I can't really tell you what to do, because I have no idea what services you need/want to expose
Are you running your own website on the server ?
If not, disable all port forwards and do communication to the NAS only via VPN (best done on a router or dedicated VPN appliance )
Are you running your own website on the server ?
If not, disable all port forwards and do communication to the NAS only via VPN (best done on a router or dedicated VPN appliance )
-
- Starting out
- Posts: 13
- Joined: Fri Jun 01, 2012 4:43 pm
Re: Persistant login failures from 127.0.0.1
Hi dolbyman, I am running my own website aswell as Sabnzbd, Sonarr, Surveillance Station and FTP (I'm not sure if Photo Station also has an open port but thats running also). All good fun huh !