Persistant login failures from 127.0.0.1

Don't miss a thing. Post your questions and discussion about other uncategorized NAS features here.
bjcalder
First post
Posts: 1
Joined: Sun Dec 30, 2012 10:07 pm

Persistant login failures from 127.0.0.1

Post by bjcalder » Wed Mar 22, 2017 4:26 pm

Is anyone else having an issue with login failures from the loopback address 127.0.0.1

I notice on start-up that there are two attempts to login with the username showing as a question mark in a diamond via HTTP.

They show up on start-up and then at other random intervals. I've done an advanced reset and they are still appearing.....any ideas?

Not sure if this is a bug or someone has a malicious script running on it.

Cheers,
Ben

eggic
New here
Posts: 8
Joined: Sun Jan 11, 2015 11:15 pm

Re: Persistant login failures from 127.0.0.1

Post by eggic » Sun Mar 26, 2017 10:36 am

Hi Ben,

I am seeing a similar login failure that just started today on my machine. It is login failures to http which is disabled on my machine. Have you had an success figuring out what is going on?

Thanks,

Eric

sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson » Thu Apr 20, 2017 9:54 pm

Hi all,

I'm also experiencing this. I dont know whats changed or whats trying to login but if you hear of anything could you please let me know. Thanks and much appreciated......

Sam

User avatar
dolbyman
Guru
Posts: 20497
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman » Thu Apr 20, 2017 9:57 pm

just stop exposing your nas (ssh,web login,etc) to the internet..problem solved

sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson » Thu Apr 20, 2017 10:00 pm

Dolbyman, I dont see how an internal IP address attempting HTTP login is related to external WAN activity? Can you elaborate?

Thanks

User avatar
dolbyman
Guru
Posts: 20497
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman » Thu Apr 20, 2017 10:04 pm

post screenshots of the messages

sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson » Thu Apr 20, 2017 10:07 pm

Please find the requested screen shot.
You do not have the required permissions to view the files attached to this post.

User avatar
dolbyman
Guru
Posts: 20497
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman » Thu Apr 20, 2017 10:29 pm

do those attempts stop when not exposing to the internet?

sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson » Thu Apr 20, 2017 10:33 pm

I leave my NAS on 24/7 and they seem to be random in attempt. They only started in March and my NAS had always been exposed to the internet before then. I do not know a way of re-creating them so even if I turned off the internet connectivity, I wouldn't know if it was going to try and login again.... :-( btw, thanks for the help.....

User avatar
dolbyman
Guru
Posts: 20497
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman » Thu Apr 20, 2017 10:37 pm

just make sure no uneeded ports are forwarded (manually or via upnp)

sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson » Thu Apr 20, 2017 10:47 pm

Would I be able to see the list of ALL open ports in the System Status -- System Service window, or would there be more that I need to find out some other way?

User avatar
dolbyman
Guru
Posts: 20497
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman » Thu Apr 20, 2017 10:49 pm

forwarded ports would be on your router

additionally check the "auto router config" on the nas

sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson » Thu Apr 20, 2017 11:07 pm

Thanks, I had to manually add any port forwards on the PlusNet router I have so anything on there I know I need, regarding the auto router config, this is a bit more perplexing. Attached is a screen shot which will help show my system but suffice to say that the web interface does take me to the general "How to make a web page" page and I know the FTP port is forwarded from my router and this works. As for the RTRR I don't think I need this turned on but I'm not sure what its used for.
You do not have the required permissions to view the files attached to this post.

User avatar
dolbyman
Guru
Posts: 20497
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Persistant login failures from 127.0.0.1

Post by dolbyman » Fri Apr 21, 2017 1:05 am

I can't really tell you what to do, because I have no idea what services you need/want to expose


Are you running your own website on the server ?
If not, disable all port forwards and do communication to the NAS only via VPN (best done on a router or dedicated VPN appliance )

sedwardson
Starting out
Posts: 13
Joined: Fri Jun 01, 2012 4:43 pm

Re: Persistant login failures from 127.0.0.1

Post by sedwardson » Fri Apr 21, 2017 4:13 pm

Hi dolbyman, I am running my own website aswell as Sabnzbd, Sonarr, Surveillance Station and FTP (I'm not sure if Photo Station also has an open port but thats running also). All good fun huh ! :-)

Post Reply

Return to “Miscellaneous”