Dont know if this is yet solved, but i also get this messages out of one device of me. tried reinstalling the mac app and reconnecting everything but the problem persists. The strange part is, that the app logs into and has no problem using home assistant but the invalid login message keeps reappearing every few seconds=(
does anybody has the same problems?
Mac App, 2021.12 (322); Hassio 2021.12.5
EDIT: Solved it by rebooting my laptop - this wasnt obvious for me, perhaps this helps others:D
I wish this could get some attention. Since it seems like it’s impossible to fix the underlying bug in HA and/or the companion apps, there should at least be an option to stop generating notifications for login failures, perhaps limited to specific IPs.
As it stands, the constant false positives make the entire notification feature useless.
It’s not (entirely, at least) camera related, since I got these constantly even before I added any cameras.
Is there an open issue for this on GitHub? I only see the one about adding more info to the message, which is not helpful given that the origin of the request (in my case the iOS app) is quite obvious from the IP.
The problem is not the notifications, which are annoying and as some said, if you ignore these, eventually you’ll ignore an important one, the problem is that this eventually locks me out of HA (I connect using the local IP or SSH and delete the ipban file). In my case it’s always my own external IP and it only happens on an iPad running the home assistant app I use as a dashboard. It happens sometimes, others it works just fine. Using the same app on 2 iPhones, another iPad and my notebook, does not trigger this. Only on that specific instance of the iOS app! I tried deleting all tokens, it makes no difference. I still resist to turn off ipban all together.
Yes, I’m still using it. It works well and only kills the login failed notifications. Obviously I’d prefer to just have this bug solved properly, but for me, killing them is worth the trade offs.
I get this as well. I didn’t at first, but it seems to have started at about the same time that I added cameras to my setup, so that theory seems to line up well for my case too.
Adding a +1 because it has become much more pervasive in the last couple of updates. The issue has persisted for years, but it has only happened w/ my Wife’s iDevices from time to time. Now it is happening with everything. Edge, Chrome, Firefox, Companion app (Android/IOS). The apps/devices never know a difference, they work and login like no issue, but almost every time coming back from a longer delay they will generate this alert multiple times daily.
*edit Add logs, all the redacted are valid hosts, and none of them have ever displayed an error message
Logger: homeassistant.components.http.ban
Source: components/http/ban.py:125
Integration: HTTP (documentation, issues)
First occurred: 1:49:24 AM (9 occurrences)
Last logged: 12:18:50 PM
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (Linux; Android 12; Pixel 3a Build/SP2A.220505.006; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/103.0.5060.71 Mobile Safari/537.36)
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.39 Safari/537.36 Edg/104.0.1293.21)
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49)
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Home Assistant/2022.3 (io.robbie.HomeAssistant; build:2022.358; iPadOS 15.5.0) Mobile/HomeAssistant, like Safari)
Login attempt or request with invalid authentication from [Redacted]. (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.0 Safari/537.36 Edg/105.0.1300.0)
+1 here as well. Getting a ton of “Login attempt failed” with "login attempt or request with invalid authentication: from my OWN external IP and my own computer’s browser with only one tab open.