sonicyouth
-
Posts
6 -
Joined
-
Last visited
Content Type
Profiles
Forums
Downloads
Store
Gallery
Bug Reports
Documentation
Landing
Posts posted by sonicyouth
-
-
Ah OK, sorry - I thought you were suggesting that I install it! Many thanks...
-
192.168.101.1 is indeed my router. Since this I've had two identical episodes again exactly a week apart. I've now disabled ssh entirely on my Unraid box.
I also checked and my Orbi already had Netgear's Armor product installed and didn't seem to have identified any of these events. I've seen a couple of other people on the forums with similar problems, but no one seems to have figured out the issue, very confused...
In any case I will probably try a hard reset of the router and see if that solves the issue. Thanks for the help so far all.
-
Hi guys,
Need some help - fix common problems has notified me of hacking attempts on two different days (roughly a week apart) - 348 attempts on each day. I have a bunch of ports forwarded (letsencrypt, openvpn, plex, organizr etc.) and also a reverse proxy. 22 is closed.
The log for the relevant days is full of similar lines to the below:
QuoteJan 3 08:38:49 MediaCentre sshd[25296]: Invalid user from 192.168.101.1 port 46341
Jan 3 08:38:49 MediaCentre sshd[25296]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25296]: Failed none for invalid user from 192.168.101.1 port 46341 ssh2
Jan 3 08:38:49 MediaCentre sshd[25296]: Failed password for invalid user from 192.168.101.1 port 46341 ssh2
Jan 3 08:38:49 MediaCentre sshd[25296]: Connection closed by invalid user 192.168.101.1 port 46341 [preauth]
Jan 3 08:38:49 MediaCentre sshd[25300]: Invalid user from 192.168.101.1 port 46345
Jan 3 08:38:49 MediaCentre sshd[25300]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25300]: Failed none for invalid user from 192.168.101.1 port 46345 ssh2
Jan 3 08:38:49 MediaCentre sshd[25300]: Failed password for invalid user from 192.168.101.1 port 46345 ssh2
Jan 3 08:38:49 MediaCentre sshd[25301]: Invalid user from 192.168.101.1 port 46346
Jan 3 08:38:49 MediaCentre sshd[25301]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25301]: Failed none for invalid user from 192.168.101.1 port 46346 ssh2
Jan 3 08:38:49 MediaCentre sshd[25299]: Invalid user from 192.168.101.1 port 46344
Jan 3 08:38:49 MediaCentre sshd[25299]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25302]: Invalid user from 192.168.101.1 port 46347
Jan 3 08:38:49 MediaCentre sshd[25302]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25301]: Failed password for invalid user from 192.168.101.1 port 46346 ssh2
Jan 3 08:38:49 MediaCentre sshd[25299]: Failed none for invalid user from 192.168.101.1 port 46344 ssh2
Jan 3 08:38:49 MediaCentre sshd[25302]: Failed none for invalid user from 192.168.101.1 port 46347 ssh2
Jan 3 08:38:49 MediaCentre sshd[25299]: Failed password for invalid user from 192.168.101.1 port 46344 ssh2
Jan 3 08:38:49 MediaCentre sshd[25302]: Failed password for invalid user from 192.168.101.1 port 46347 ssh2
Jan 3 08:38:49 MediaCentre sshd[25298]: Invalid user from 192.168.101.1 port 46343
Jan 3 08:38:49 MediaCentre sshd[25298]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25298]: Failed none for invalid user from 192.168.101.1 port 46343 ssh2
Jan 3 08:38:49 MediaCentre sshd[25298]: Failed password for invalid user from 192.168.101.1 port 46343 ssh2
Jan 3 08:38:49 MediaCentre sshd[25298]: Connection closed by invalid user 192.168.101.1 port 46343 [preauth]
Jan 3 08:38:49 MediaCentre sshd[25299]: Connection closed by invalid user 192.168.101.1 port 46344 [preauth]
Jan 3 08:38:49 MediaCentre sshd[25300]: Connection closed by invalid user 192.168.101.1 port 46345 [preauth]
Jan 3 08:38:49 MediaCentre sshd[25302]: Connection closed by invalid user 192.168.101.1 port 46347 [preauth]
Jan 3 08:38:49 MediaCentre sshd[25301]: Connection closed by invalid user 192.168.101.1 port 46346 [preauth]
Jan 3 08:38:49 MediaCentre sshd[25312]: Accepted none for root from 192.168.101.1 port 46351 ssh2
Jan 3 08:38:49 MediaCentre sshd[25310]: Invalid user pi from 192.168.101.1 port 46349
Jan 3 08:38:49 MediaCentre sshd[25310]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25310]: Failed none for invalid user pi from 192.168.101.1 port 46349 ssh2
Jan 3 08:38:49 MediaCentre sshd[25310]: Failed password for invalid user pi from 192.168.101.1 port 46349 ssh2
Jan 3 08:38:49 MediaCentre sshd[25308]: Invalid user from 192.168.101.1 port 46348
Jan 3 08:38:49 MediaCentre sshd[25308]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25308]: Failed none for invalid user from 192.168.101.1 port 46348 ssh2
Jan 3 08:38:49 MediaCentre sshd[25309]: Invalid user admin from 192.168.101.1 port 46350
Jan 3 08:38:49 MediaCentre sshd[25309]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25315]: Invalid user vagrant from 192.168.101.1 port 46352
Jan 3 08:38:49 MediaCentre sshd[25315]: error: Could not get shadow information for NOUSER
Jan 3 08:38:49 MediaCentre sshd[25309]: Failed none for invalid user admin from 192.168.101.1 port 46350 ssh2
Jan 3 08:38:49 MediaCentre sshd[25315]: Failed none for invalid user vagrant from 192.168.101.1 port 46352 ssh2
Jan 3 08:38:49 MediaCentre sshd[25308]: Failed password for invalid user from 192.168.101.1 port 46348 ssh2
Jan 3 08:38:49 MediaCentre sshd[25315]: Failed password for invalid user vagrant from 192.168.101.1 port 46352 ssh2
Jan 3 08:38:49 MediaCentre sshd[25309]: Failed password for invalid user admin from 192.168.101.1 port 46350 ssh2
Jan 3 08:38:49 MediaCentre sshd[25308]: Connection closed by invalid user 192.168.101.1 port 46348 [preauth]Somewhat confused as none of these ports are forwarded so unsure how the attempts are even getting through to the unraid box. My router is a Netgear Orbi AC3000 - any ideas / similar experiences?
Many thanks!
-
First of all, great work - awesome resource to have (and thanks for your many other Unraid tutorials!)
I'm trying to use Macinabox for the first time today and I get the following error: "Product ID 041-83630 could not be found"
I assume this is related to Catalina 10.15.2 being released yesterday, and was wondering if there's an easy fix on my end?
Thanks!
-
HI there,
Have just got a new server up and running and fixcommon problems warned me of some call trace errors - diagnostics attached. Is this something I need to worry about?
Thanks!
[Support] Organzir Organizr
in Docker Containers
Posted
I was struggling with this too - the thing that fixed it for me was to:
- Edit the default file in the letsencrypt/nginx site-confs folder
- Comment out the #location ~ \.php$ section
This was a comment that I noticed in one of the newer swag template files.
Hope this helps some of you guys!