Skip to content
View in the app

A better way to browse. Learn more.
Unraid

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Unraid Summer Sale in live: 20% off Starter and Unleashed + buy one, get one 50% off

Update - is my server getting attached? Causing my problems?

jesseasi
in unRAID Server 4.4 [No new topics]

Featured Replies

I am running 4.4 and since I never had any problems I never considered upgrading.

 

Lately it seems like I am loosing access to the web admin and access through telnet or ssh.  However all the shares still work and my data is still accessible.

 

I have no idea what could be causing these new problems - so as I look into getting this fixed - I see that there is a new update - 4.5.3 now.  But so many of the posts here are about problems with 4.5.x.  

 

So should I upgrade?  How hard is it to upgrade?  

 

If not - anyone know what could be causing my problems?  The only way to remedy this so far has been to hit the reset button and let the system reboot.  Then web admin works - but a few days later - it stops....

 

Thanks for any advice.

  • Author

Correction - I am able to telnet in.  I just can't get web access.  Any ideas why this happens?

  • Author

Could my server be gettting attacked?   

 

There are thousands of entries like this in my syslog. A quick reverse lookup of this IP and it appears this computer is in Beijing China....

 

Mar 5 05:04:09 Tower vsftpd: Fri Mar 5 05:04:09 2010 [pid 9981] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:11 Tower vsftpd: Fri Mar 5 05:04:11 2010 [pid 9981] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:12 Tower vsftpd: Fri Mar 5 05:04:12 2010 [pid 9981] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:14 Tower vsftpd[9983]: connect from 60.195.250.56 (60.195.250.56)

Mar 5 05:04:14 Tower vsftpd: Fri Mar 5 05:04:14 2010 [pid 9984] CONNECT: Client "60.195.250.56"

Mar 5 05:04:14 Tower vsftpd: Fri Mar 5 05:04:14 2010 [pid 9983] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:16 Tower vsftpd: Fri Mar 5 05:04:16 2010 [pid 9983] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:17 Tower vsftpd: Fri Mar 5 05:04:17 2010 [pid 9983] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:19 Tower vsftpd[9985]: connect from 60.195.250.56 (60.195.250.56)

Mar 5 05:04:19 Tower vsftpd: Fri Mar 5 05:04:19 2010 [pid 9986] CONNECT: Client "60.195.250.56"

Mar 5 05:04:20 Tower vsftpd: Fri Mar 5 05:04:20 2010 [pid 9985] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:22 Tower vsftpd: Fri Mar 5 05:04:22 2010 [pid 9985] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:23 Tower vsftpd: Fri Mar 5 05:04:23 2010 [pid 9985] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:25 Tower vsftpd[9987]: connect from 60.195.250.56 (60.195.250.56)

Mar 5 05:04:25 Tower vsftpd: Fri Mar 5 05:04:25 2010 [pid 9988] CONNECT: Client "60.195.250.56"

Mar 5 05:04:25 Tower vsftpd: Fri Mar 5 05:04:25 2010 [pid 9987] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:27 Tower vsftpd: Fri Mar 5 05:04:27 2010 [pid 9987] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:29 Tower vsftpd: Fri Mar 5 05:04:29 2010 [pid 9987] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:30 Tower vsftpd[9989]: connect from 60.195.250.56 (60.195.250.56)

Mar 5 05:04:30 Tower vsftpd: Fri Mar 5 05:04:30 2010 [pid 9990] CONNECT: Client "60.195.250.56"

Mar 5 05:04:31 Tower vsftpd: Fri Mar 5 05:04:31 2010 [pid 9989] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:32 Tower vsftpd: Fri Mar 5 05:04:32 2010 [pid 9989] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:34 Tower vsftpd: Fri Mar 5 05:04:34 2010 [pid 9989] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:36 Tower vsftpd[9991]: connect from 60.195.250.56 (60.195.250.56)

Mar 5 05:04:36 Tower vsftpd: Fri Mar 5 05:04:36 2010 [pid 9992] CONNECT: Client "60.195.250.56"

Mar 5 05:04:36 Tower vsftpd: Fri Mar 5 05:04:36 2010 [pid 9991] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:37 Tower vsftpd: Fri Mar 5 05:04:37 2010 [pid 9991] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:39 Tower vsftpd: Fri Mar 5 05:04:39 2010 [pid 9991] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:40 Tower vsftpd[9993]: connect from 60.195.250.56 (60.195.250.56)

Mar 5 05:04:40 Tower vsftpd: Fri Mar 5 05:04:40 2010 [pid 9994] CONNECT: Client "60.195.250.56"

Mar 5 05:04:41 Tower vsftpd: Fri Mar 5 05:04:41 2010 [pid 9993] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:42 Tower vsftpd: Fri Mar 5 05:04:43 2010 [pid 9993] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:44 Tower vsftpd: Fri Mar 5 05:04:44 2010 [pid 9993] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:46 Tower vsftpd[9995]: connect from 60.195.250.56 (60.195.250.56)

Mar 5 05:04:46 Tower vsftpd: Fri Mar 5 05:04:46 2010 [pid 9996] CONNECT: Client "60.195.250.56"

Mar 5 05:04:46 Tower vsftpd: Fri Mar 5 05:04:46 2010 [pid 9995] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:48 Tower vsftpd: Fri Mar 5 05:04:48 2010 [pid 9995] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:49 Tower vsftpd: Fri Mar 5 05:04:49 2010 [pid 9995] [Administrator] FAIL LOGIN: Client "60.195.250.56"

Mar 5 05:04:51 Tower vsftpd[9997]: connect from 60.195.250.56 (60.195.250.56)

Yes... someone using a system in China is tying to login to your server.

 

How are you connecting your LAN to the Internet?

  • Author

My network is connected to the internet through DLink gaming router.  This is one of the newer routers that support N wireless.  I use dyndns to update my IP address so I can access my system remotely.

 

One of the most important functions of my unraid system is that I run the FTP services and I have remote webservers that log in daily and upload backup sets to my unraid.  Based on the "vsftpd" line in the syslog - would they be trying to log in via an FTP connection?

 

Any tips on how to block these?

Only allow access into your lan from known addresses. 

 

Is port 80 open to the internet?  If it is....  thats why the webgui is crashing, it doesn't react well to attempts to "hack" it.

  • Author

Just closed port 80.  I hope that fixes this problem.

 

Thanks for all the help.  Now while I am at it - might as well looking into upgrading to the newest version....

If you are exposed to the Internet, you need to close a lot more than port 80.....

 

  • Author

Only thing open now is Port 21. 

If you got away with this error you are one lucky puppy

 

Now please dont take this the wrong way but DONT OPEN UNRAID TO THE INTERNET.

Archived

This topic is now archived and is closed to further replies.

Go to topic listing

Account

Navigation

Search

Search

Configure browser push notifications
Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.