Persistant login failures from 127.0.0.1

Don't miss a thing. Post your questions and discussion about other uncategorized NAS features here.
bjcalder
First post
Posts: 1
Joined: Sun Dec 30, 2012 10:07 pm

Persistant login failures from 127.0.0.1

Post by bjcalder »

Is anyone else having an issue with login failures from the loopback address 127.0.0.1

I notice on start-up that there are two attempts to login with the username showing as a question mark in a diamond via HTTP.

They show up on start-up and then at other random intervals. I've done an advanced reset and they are still appearing.....any ideas?

Not sure if this is a bug or someone has a malicious script running on it.

Cheers,
Ben
eggic
New here
Posts: 8
Joined: Sun Jan 11, 2015 11:15 pm

Re: Persistant login failures from 127.0.0.1

Post by eggic »

Hi Ben,

I am seeing a similar login failure that just started today on my machine. It is login failures to http which is disabled on my machine. Have you had an success figuring out what is going on?

Thanks,

Eric
sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson »

Hi all,

I'm also experiencing this. I dont know whats changed or whats trying to login but if you hear of anything could you please let me know. Thanks and much appreciated......

Sam
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman »

just stop exposing your nas (ssh,web login,etc) to the internet..problem solved
sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson »

Dolbyman, I dont see how an internal IP address attempting HTTP login is related to external WAN activity? Can you elaborate?

Thanks
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman »

post screenshots of the messages
sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson »

Please find the requested screen shot.
You do not have the required permissions to view the files attached to this post.
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman »

do those attempts stop when not exposing to the internet?
sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson »

I leave my NAS on 24/7 and they seem to be random in attempt. They only started in March and my NAS had always been exposed to the internet before then. I do not know a way of re-creating them so even if I turned off the internet connectivity, I wouldn't know if it was going to try and login again.... :-( btw, thanks for the help.....
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman »

just make sure no uneeded ports are forwarded (manually or via upnp)
sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson »

Would I be able to see the list of ALL open ports in the System Status -- System Service window, or would there be more that I need to find out some other way?
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman »

forwarded ports would be on your router

additionally check the "auto router config" on the nas
sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson »

Thanks, I had to manually add any port forwards on the PlusNet router I have so anything on there I know I need, regarding the auto router config, this is a bit more perplexing. Attached is a screen shot which will help show my system but suffice to say that the web interface does take me to the general "How to make a web page" page and I know the FTP port is forwarded from my router and this works. As for the RTRR I don't think I need this turned on but I'm not sure what its used for.
You do not have the required permissions to view the files attached to this post.
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman »

I can't really tell you what to do, because I have no idea what services you need/want to expose


Are you running your own website on the server ?
If not, disable all port forwards and do communication to the NAS only via VPN (best done on a router or dedicated VPN appliance )
sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson »

Hi dolbyman, I am running my own website aswell as Sabnzbd, Sonarr, Surveillance Station and FTP (I'm not sure if Photo Station also has an open port but thats running also). All good fun huh ! :-)
Locked

Return to “Miscellaneous”