error: failed to login via user account "admin", it wasn't me...

Introduce yourself to us and other members here, or share your own product reviews, suggestions, and tips and tricks of using QNAP products.
Post Reply
marklyn
Getting the hang of things
Posts: 94
Joined: Mon Oct 12, 2015 5:26 am

error: failed to login via user account "admin", it wasn't me...

Post by marklyn »

So this morning I got 4 notifications about failure to login to the admin account. They were 3 seconds apart. They were all from the same IP address, somewhere in the Toronto area (I'm in Austin, Tx).
A week ago after the Qlocker incident, I initially gave the admin account a strong password but later just disabled (and left it disabled). I also turned off UPnP *everywhere* on my network.
Does this mean someone still found my QNAP and was trying to login to the admin account?
See attachment below. Would appreciate any theories...
Screenshot_20210507-112557_Textra.jpg
You do not have the required permissions to view the files attached to this post.
TS453Pro, Network: Single port, 8Gb RAM
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: error: failed to login via user account "admin", it wasn't me...

Post by dolbyman »

what does the actual qnap log say ? ...

do you still have manual port forwards active ?

or is this some qnapcloud portal error ? (there was some thread about it earlier this week)
marklyn
Getting the hang of things
Posts: 94
Joined: Mon Oct 12, 2015 5:26 am

Re: error: failed to login via user account "admin", it wasn't me...

Post by marklyn »

This is from the QNAP log:
Error 2021-05-07 05:46:59 admin 184.75.221.211 Users Login [Users] Failed to log in via user account "admin". Source IP address: 184.75.221.211.
Yes, I have QNAP Plex server port forwarded to my router so I can view plex when traveling.
I also have QNAP port forwarded to a somewhat obscure port number so I can access my files while traveling.
TS453Pro, Network: Single port, 8Gb RAM
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: error: failed to login via user account "admin", it wasn't me...

Post by dolbyman »

Changing to an obscure port will not help, do not expose any part of your QTS to WAN (if you feel confident Plex will not have any vulnerabilities .. you can forward your Plex port)

If you need to access your files on the go , use a VPN (no, that does not cost a subscription fee)
marklyn
Getting the hang of things
Posts: 94
Joined: Mon Oct 12, 2015 5:26 am

Re: error: failed to login via user account "admin", it wasn't me...

Post by marklyn »

Use a VPN that is on the QNAP or a VPN elsewhere?
Is it possible to set up a VPN for only inbound internet traffic so that local network disk writes/access is not affected?
Sorry if that is a dumb question, my VPN experience is shaky.
TS453Pro, Network: Single port, 8Gb RAM
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: error: failed to login via user account "admin", it wasn't me...

Post by dolbyman »

VPN server should be best installed on your router or a dedicated appliance (firewall,raspi,etc)

local transfer would not change at all, VPN is only for WAN to LAN access
marklyn
Getting the hang of things
Posts: 94
Joined: Mon Oct 12, 2015 5:26 am

Re: error: failed to login via user account "admin", it wasn't me...

Post by marklyn »

Thanks dolbyman
TS453Pro, Network: Single port, 8Gb RAM
PC OS: WIndows 10 home
4 TB ST4000VX007 X2 (RAID1) Volume 1
4 TB ST4000VX007 X1 (JBOD) Volume 2
6 TB ST6000VX007 X1 (JBOD) Volume 3
Post Reply

Return to “Users' Corner”