I recently started getting failed log in attempts between Home Assistant and my QNAP NAS.
I get the following notifications every 5-6 hours.
App Name: Users
Category: Login and Security
Message: [Users] Failed to log in via user account “admin”. Source IP address: MY HA’s IP
How can I check what within HA is doing this and why. And why has this suddenly started.
What add-ons or integrations are you using that connects to your NAS?
Which one is is using the “admin” user name?
Did you set up network storage for backups?
Did you set up the QNAP integration?
Is another integration like Frigate saving to your NAS?
I have not configured Network Storage. I dont use the QNAP integration.
None of my add-ons are pointed at my NAS.
Like I said, this has only started recently.
Does the notification list the port number of the source as well as the ip address?
If not you may have to do some network sniffing with wireshark.
My QNAP log is showing that the login attempt is coming from a client agent called “Agent” over “HTTP” and trying to access the resource “Administration” using user “admin”.
I ran wireshark overnight and there was absolutely no sign of a direct log in attempt between HA and the QNAP, and yet my QNAP set me 2 notifications of failed login attempts from HA trying to use the admin user.
I’m now at a loss. What else can I try to check on HA?
Is there somewhere I can search for all configuration settings across HA to look for any evidence of user admin being pointed at my NAS.