WTH are those Login Attempt failed?

Archive Month of "What the heck?!" (2020)
80

I have the same password (on the same installation) for two years, yet I’m getting these bogus notifications from devices that are obviously correctly logged in for years as well. It’s apparently a bug or something. At the very least, there should be an ignore button.

1 Like
81

Dont know if this is yet solved, but i also get this messages out of one device of me. tried reinstalling the mac app and reconnecting everything but the problem persists. The strange part is, that the app logs into and has no problem using home assistant but the invalid login message keeps reappearing every few seconds=(

does anybody has the same problems?

Mac App, 2021.12 (322); Hassio 2021.12.5

EDIT: Solved it by rebooting my laptop - this wasnt obvious for me, perhaps this helps others:D

82

I wish this could get some attention. Since it seems like it’s impossible to fix the underlying bug in HA and/or the companion apps, there should at least be an option to stop generating notifications for login failures, perhaps limited to specific IPs.

As it stands, the constant false positives make the entire notification feature useless.

It’s not (entirely, at least) camera related, since I got these constantly even before I added any cameras.

Is there an open issue for this on GitHub? I only see the one about adding more info to the message, which is not helpful given that the origin of the request (in my case the iOS app) is quite obvious from the IP.

4 Likes
83

Agreed. It’s going on since day one (2019 for me). Password hasn’t changed and there’s nothing related to the IP from the error in the log at all.

84

I’d love to be able to mute these pesky notifications. I keep ignoring them and missing useful ones!

1 Like
85

This is my workaround. It’s pretty nuclear, but I don’t have to see the notifications.

- alias: 'Dismiss login failed notification'
  trigger:
    - platform: state
      entity_id: persistent_notification.http_login
      to: 'notifying'
  action:
    - delay: "00:00:01"
    - service: persistent_notification.dismiss
      data:
        notification_id: http-login
16 Likes
86

The problem is not the notifications, which are annoying and as some said, if you ignore these, eventually you’ll ignore an important one, the problem is that this eventually locks me out of HA (I connect using the local IP or SSH and delete the ipban file). In my case it’s always my own external IP and it only happens on an iPad running the home assistant app I use as a dashboard. It happens sometimes, others it works just fine. Using the same app on 2 iPhones, another iPad and my notebook, does not trigger this. Only on that specific instance of the iOS app! I tried deleting all tokens, it makes no difference. I still resist to turn off ipban all together.

2 Likes
87

Same here. I got used to it :smirk:

88

This Community website doesn’t seem to offer ANY fixes for the problems. This isn’t anything against you. I just had to reply somewhere.

89

@kmlucy are you still using this? does it kill other notifications?

90

Yes, I’m still using it. It works well and only kills the login failed notifications. Obviously I’d prefer to just have this bug solved properly, but for me, killing them is worth the trade offs.

3 Likes
91

Thanks, I will give it a try!

92

I get this as well. I didn’t at first, but it seems to have started at about the same time that I added cameras to my setup, so that theory seems to line up well for my case too.

93

Can someone confirm, if there is a fix for this already? I am on the latest version on HA, but I still see the errors. Thank you!

94

I set up the Automation from @kmlucy and it works great.

95

I started seeing this after updating to 2022.7.1. Not sure exactly what changed as part of the update for this to start happening.

96

Same here, and my cellphone IP has been banned twice in 2 days…

97

Chiming in to express my deep annoyance at this. It’s constant and endless.

Logger: homeassistant.components.http.ban
Source: components/http/ban.py:125
Integration: HTTP ([documentation](https://www.home-assistant.io/integrations/http), [issues](https://github.com/home-assistant/home-assistant/issues?q=is:issue+is:open+label:%22integration:+http%22))
First occurred: July 11, 2022, 9:51:50 PM (49 occurrences)
Last logged: 3:50:33 PM

• Login attempt or request with invalid authentication from 2600:[redacted] (2600:[redacted]). (HomeAssistant/2022.7.3 httpx/0.23.0 Python/3.10)

• Login attempt or request with invalid authentication from 2600:[redacted] (2600:[redacted]). (okhttp/3.14.9)
98

Adding a +1 because it has become much more pervasive in the last couple of updates. The issue has persisted for years, but it has only happened w/ my Wife’s iDevices from time to time. Now it is happening with everything. Edge, Chrome, Firefox, Companion app (Android/IOS). The apps/devices never know a difference, they work and login like no issue, but almost every time coming back from a longer delay they will generate this alert multiple times daily.
*edit Add logs, all the redacted are valid hosts, and none of them have ever displayed an error message

Logger: homeassistant.components.http.ban
Source: components/http/ban.py:125
Integration: HTTP (documentation, issues)
First occurred: 1:49:24 AM (9 occurrences)
Last logged: 12:18:50 PM

Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (Linux; Android 12; Pixel 3a Build/SP2A.220505.006; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/103.0.5060.71 Mobile Safari/537.36)
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.39 Safari/537.36 Edg/104.0.1293.21)
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49)
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Home Assistant/2022.3 (io.robbie.HomeAssistant; build:2022.358; iPadOS 15.5.0) Mobile/HomeAssistant, like Safari)
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.0 Safari/537.36 Edg/105.0.1300.0)
99

+1 here as well. Getting a ton of “Login attempt failed” with "login attempt or request with invalid authentication: from my OWN external IP and my own computer’s browser with only one tab open.

1 Like