So this morning I got 4 notifications about failure to login to the admin account. They were 3 seconds apart. They were all from the same IP address, somewhere in the Toronto area (I'm in Austin, Tx).
A week ago after the Qlocker incident, I initially gave the admin account a strong password but later just disabled (and left it disabled). I also turned off UPnP *everywhere* on my network.
Does this mean someone still found my QNAP and was trying to login to the admin account?
See attachment below. Would appreciate any theories...
error: failed to login via user account "admin", it wasn't me...
-
- Getting the hang of things
- Posts: 95
- Joined: Mon Oct 12, 2015 5:26 am
error: failed to login via user account "admin", it wasn't me...
You do not have the required permissions to view the files attached to this post.
TS453Pro, Network: Single port, 8Gb RAM
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
- dolbyman
- Guru
- Posts: 35276
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: error: failed to login via user account "admin", it wasn't me...
what does the actual qnap log say ? ...
do you still have manual port forwards active ?
or is this some qnapcloud portal error ? (there was some thread about it earlier this week)
do you still have manual port forwards active ?
or is this some qnapcloud portal error ? (there was some thread about it earlier this week)
-
- Getting the hang of things
- Posts: 95
- Joined: Mon Oct 12, 2015 5:26 am
Re: error: failed to login via user account "admin", it wasn't me...
This is from the QNAP log:
Error 2021-05-07 05:46:59 admin 184.75.221.211 Users Login [Users] Failed to log in via user account "admin". Source IP address: 184.75.221.211.
Yes, I have QNAP Plex server port forwarded to my router so I can view plex when traveling.
I also have QNAP port forwarded to a somewhat obscure port number so I can access my files while traveling.
Error 2021-05-07 05:46:59 admin 184.75.221.211 Users Login [Users] Failed to log in via user account "admin". Source IP address: 184.75.221.211.
Yes, I have QNAP Plex server port forwarded to my router so I can view plex when traveling.
I also have QNAP port forwarded to a somewhat obscure port number so I can access my files while traveling.
TS453Pro, Network: Single port, 8Gb RAM
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
- dolbyman
- Guru
- Posts: 35276
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: error: failed to login via user account "admin", it wasn't me...
Changing to an obscure port will not help, do not expose any part of your QTS to WAN (if you feel confident Plex will not have any vulnerabilities .. you can forward your Plex port)
If you need to access your files on the go , use a VPN (no, that does not cost a subscription fee)
If you need to access your files on the go , use a VPN (no, that does not cost a subscription fee)
-
- Getting the hang of things
- Posts: 95
- Joined: Mon Oct 12, 2015 5:26 am
Re: error: failed to login via user account "admin", it wasn't me...
Use a VPN that is on the QNAP or a VPN elsewhere?
Is it possible to set up a VPN for only inbound internet traffic so that local network disk writes/access is not affected?
Sorry if that is a dumb question, my VPN experience is shaky.
Is it possible to set up a VPN for only inbound internet traffic so that local network disk writes/access is not affected?
Sorry if that is a dumb question, my VPN experience is shaky.
TS453Pro, Network: Single port, 8Gb RAM
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
- dolbyman
- Guru
- Posts: 35276
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: error: failed to login via user account "admin", it wasn't me...
VPN server should be best installed on your router or a dedicated appliance (firewall,raspi,etc)
local transfer would not change at all, VPN is only for WAN to LAN access
local transfer would not change at all, VPN is only for WAN to LAN access
-
- Getting the hang of things
- Posts: 95
- Joined: Mon Oct 12, 2015 5:26 am
Re: error: failed to login via user account "admin", it wasn't me...
Thanks dolbyman
TS453Pro, Network: Single port, 8Gb RAM
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3