sonicyouth

Members
  • Posts

    6
  • Joined

  • Last visited

Posts posted by sonicyouth

  1. I was struggling with this too - the thing that fixed it for me was to:

    - Edit the default file in the letsencrypt/nginx site-confs folder

    - Comment out the #location ~ \.php$ section

     

    This was a comment that I noticed in one of the newer swag template files.

     

    Hope this helps some of you guys!

  2. 192.168.101.1 is indeed my router. Since this I've had two identical episodes again exactly a week apart. I've now disabled ssh entirely on my Unraid box.

     

    I also checked and my Orbi already had Netgear's Armor product installed and didn't seem to have identified any of these events. I've seen a couple of other people on the forums with similar problems, but no one seems to have figured out the issue, very confused...

     

    In any case I will probably try a hard reset of the router and see if that solves the issue. Thanks for the help so far all.

  3. Hi guys,

     

    Need some help - fix common problems has notified me of hacking attempts on two different days (roughly a week apart) - 348 attempts on each day. I have a bunch of ports forwarded (letsencrypt, openvpn, plex, organizr etc.) and also a reverse proxy. 22 is closed. 

     

    The log for the relevant days is full of similar lines to the below:

    Quote

    Jan  3 08:38:49 MediaCentre sshd[25296]: Invalid user  from 192.168.101.1 port 46341
    Jan  3 08:38:49 MediaCentre sshd[25296]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25296]: Failed none for invalid user  from 192.168.101.1 port 46341 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25296]: Failed password for invalid user  from 192.168.101.1 port 46341 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25296]: Connection closed by invalid user  192.168.101.1 port 46341 [preauth]
    Jan  3 08:38:49 MediaCentre sshd[25300]: Invalid user  from 192.168.101.1 port 46345
    Jan  3 08:38:49 MediaCentre sshd[25300]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25300]: Failed none for invalid user  from 192.168.101.1 port 46345 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25300]: Failed password for invalid user  from 192.168.101.1 port 46345 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25301]: Invalid user  from 192.168.101.1 port 46346
    Jan  3 08:38:49 MediaCentre sshd[25301]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25301]: Failed none for invalid user  from 192.168.101.1 port 46346 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25299]: Invalid user  from 192.168.101.1 port 46344
    Jan  3 08:38:49 MediaCentre sshd[25299]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25302]: Invalid user  from 192.168.101.1 port 46347
    Jan  3 08:38:49 MediaCentre sshd[25302]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25301]: Failed password for invalid user  from 192.168.101.1 port 46346 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25299]: Failed none for invalid user  from 192.168.101.1 port 46344 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25302]: Failed none for invalid user  from 192.168.101.1 port 46347 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25299]: Failed password for invalid user  from 192.168.101.1 port 46344 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25302]: Failed password for invalid user  from 192.168.101.1 port 46347 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25298]: Invalid user  from 192.168.101.1 port 46343
    Jan  3 08:38:49 MediaCentre sshd[25298]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25298]: Failed none for invalid user  from 192.168.101.1 port 46343 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25298]: Failed password for invalid user  from 192.168.101.1 port 46343 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25298]: Connection closed by invalid user  192.168.101.1 port 46343 [preauth]
    Jan  3 08:38:49 MediaCentre sshd[25299]: Connection closed by invalid user  192.168.101.1 port 46344 [preauth]
    Jan  3 08:38:49 MediaCentre sshd[25300]: Connection closed by invalid user  192.168.101.1 port 46345 [preauth]
    Jan  3 08:38:49 MediaCentre sshd[25302]: Connection closed by invalid user  192.168.101.1 port 46347 [preauth]
    Jan  3 08:38:49 MediaCentre sshd[25301]: Connection closed by invalid user  192.168.101.1 port 46346 [preauth]
    Jan  3 08:38:49 MediaCentre sshd[25312]: Accepted none for root from 192.168.101.1 port 46351 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25310]: Invalid user pi from 192.168.101.1 port 46349
    Jan  3 08:38:49 MediaCentre sshd[25310]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25310]: Failed none for invalid user pi from 192.168.101.1 port 46349 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25310]: Failed password for invalid user pi from 192.168.101.1 port 46349 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25308]: Invalid user  from 192.168.101.1 port 46348
    Jan  3 08:38:49 MediaCentre sshd[25308]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25308]: Failed none for invalid user  from 192.168.101.1 port 46348 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25309]: Invalid user admin from 192.168.101.1 port 46350
    Jan  3 08:38:49 MediaCentre sshd[25309]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25315]: Invalid user vagrant from 192.168.101.1 port 46352
    Jan  3 08:38:49 MediaCentre sshd[25315]: error: Could not get shadow information for NOUSER
    Jan  3 08:38:49 MediaCentre sshd[25309]: Failed none for invalid user admin from 192.168.101.1 port 46350 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25315]: Failed none for invalid user vagrant from 192.168.101.1 port 46352 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25308]: Failed password for invalid user  from 192.168.101.1 port 46348 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25315]: Failed password for invalid user vagrant from 192.168.101.1 port 46352 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25309]: Failed password for invalid user admin from 192.168.101.1 port 46350 ssh2
    Jan  3 08:38:49 MediaCentre sshd[25308]: Connection closed by invalid user  192.168.101.1 port 46348 [preauth]

     

    Somewhat confused as none of these ports are forwarded so unsure how the attempts are even getting through to the unraid box. My router is a Netgear Orbi AC3000 - any ideas / similar experiences?

     

    Many thanks!

  4. First of all, great work - awesome resource to have (and thanks for your many other Unraid tutorials!)

     

    I'm trying to use Macinabox for the first time today and I get the following error: "Product ID 041-83630 could not be found"

     

    I assume this is related to Catalina 10.15.2 being released yesterday, and was wondering if there's an easy fix on my end?

     

    Thanks!