Jump to content


Photo

Failed Logins in Web Syslog

authentication 127.0.0.1 localhost admin

  • Please log in to reply
1 reply to this topic

#1 Ken Pohlman

Ken Pohlman
  • Members
  • 3 posts

Posted 14 August 2015 - 08:25 AM

Today I decided to look at the websyslog as I was making config changes to my Spam Firewall 300.

 

I noticed that while I was logged in and working, multiple Failed Login attempts from 127.0.0.1 were recorded for the admin account.

 

 Aug 14 08:19:09 2015 barracuda web: [127.0.0.1] FAILED_LOGIN (admin)

Aug 14 08:19:09 2015 barracuda web: [127.0.0.1] FAILED_LOGIN (admin)
Aug 14 08:21:24 2015 barracuda web: [127.0.0.1] FAILED_LOGIN (admin)
Aug 14 08:21:27 2015 barracuda web: [127.0.0.1] FAILED_LOGIN (admin)
Aug 14 08:22:31 2015 barracuda web: [127.0.0.1] FAILED_LOGIN (admin)
Aug 14 08:22:31 2015 barracuda web: [127.0.0.1] FAILED_LOGIN (admin)
Aug 14 08:23:31 2015 barracuda web: [127.0.0.1] FAILED_LOGIN (admin)

(There are many more logged attempts, but you get the idea)

 

I just upgraded the firmware on this unit a couple of days ago and never noticed this behavior prior.

 

Any thoughts guys?

 



#2 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 14 August 2015 - 08:52 AM

Hi Ken,

 

offhand I believe this to be our UI latency checking script that monitors the web interface response times, but if you can contact support we can assist in verifying with you



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com