Hot!Login failed from 127.0.0.1

Author
shin_amuro
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/02/02 02:24:30
  • Status: offline
2018/02/02 02:37:34 (permalink)
0

Login failed from 127.0.0.1

Hi,
 
I am getting the following logs every around 15 minutes on my 50E
 
Administrator admin login failed from http(127.0.0.1) because of invalid password

 
Any has any idea on what is this could be?
 
Thanks
#1

7 Replies Related Threads

    SteveG
    Silver Member
    • Total Posts : 97
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/19 00:26:22
    • Status: offline
    Re: Login failed from 127.0.0.1 2018/02/13 12:27:12 (permalink)
    0
    I'm seeing that too, also had some post upgrade issues that seem related to firefox. Using Chrome 'fixes' the problem. Try clearing your firefox cache as that helped for me re the incorrect HA Status Dashboard feed back I was getting.
    post edited by SteveG - 2018/02/13 12:31:43
    #2
    FatalHalt
    Gold Member
    • Total Posts : 122
    • Scores: 8
    • Reward points: 0
    • Joined: 2014/06/11 08:51:54
    • Status: offline
    Re: Login failed from 127.0.0.1 2018/02/13 12:56:21 (permalink)
    0
    What firmware are you on?
    #3
    SteveG
    Silver Member
    • Total Posts : 97
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/19 00:26:22
    • Status: offline
    Re: Login failed from 127.0.0.1 2018/02/13 13:00:55 (permalink)
    0
    We are seeing this on 5.6.3, tonight we upgraded two other 200Ds to 5.6.3 and starting seeing the same thing on these when using firefox.
    #4
    SteveG
    Silver Member
    • Total Posts : 97
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/19 00:26:22
    • Status: offline
    Re: Login failed from 127.0.0.1 2018/02/13 13:02:41 (permalink)
    0
    I just refreshed the 5.6.3 fortigate and immediately received this warning.
     
    ui="http(127.0.0.1)" method="http" srcip=127.0.0.1 dstip=127.0.0.1 action="login" status="failed" reason="passwd_invalid"
    #5
    emnoc
    Expert Member
    • Total Posts : 4941
    • Scores: 306
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: offline
    Re: Login failed from 127.0.0.1 2018/02/13 19:03:16 (permalink)
    0
    I would run a diag sniffer any "host 127.0.0.1" and see what's happening, it could be something that's configured or maybe HA  ( HA typical uses a 169.254 APIPA  addressing )
     
    Ken

    PCNSE,  NSE , Forcepoint ,  StrongSwan Specialist
    #6
    SteveG
    Silver Member
    • Total Posts : 97
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/19 00:26:22
    • Status: offline
    Re: Login failed from 127.0.0.1 2018/02/14 00:59:51 (permalink)
    0
    I have a sneaky suspicion it's being caused by having the "HA Status" Widget in the dashboard. We have four 200D's at different sites running 5.6.3 and the only two I'm getting these errors from have that dashboard enabled. I've removed the HA Widget from one of the 200D's so I'll report back if that stops the auth errors.
    #7
    emnoc
    Expert Member
    • Total Posts : 4941
    • Scores: 306
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: offline
    Re: Login failed from 127.0.0.1 2018/02/14 07:42:57 (permalink)
    0
    If you have multiple   vdom I would scroll thru them all and use the cli-cmd
     
    cli;
     
    get sys session list | grep 127.0
    get system  source-ip status
     diag  ip tcp list
     diag  ip udp list

    PCNSE,  NSE , Forcepoint ,  StrongSwan Specialist
    #8
    Jump to:
    © 2018 APG vNext Commercial Version 5.5