I’m not sure this is the same problem, but today my TS-130 sent 146 notifications of failed login attempts over an 8 minute period starting at 06:00:
[QuLog Center] Failed to log in. User: —. Source IP: ::1. Connection type: HTTP.
This looked like an inside job so I checked the crontab for that time and found:
0 6 * * 5 /usr/local/bin/python /share/CACHEDEV1_DATA/.qpkg/SecurityCounselor/bin/security_advisor --check_all;#SA_SecurityCounselor_SA_security_counselor_schedule_task_SA
I know I have seen Security Advisor and/or Security Counselor apps, but neither exists in the web UI now. Based on posts elsewhere I ran the uninstaller:
sudo /share/CACHEDEV1_DATA/.qpkg/SecurityCounselor/.uninstall.sh
That did remove the package and the cron job, so I’m expecting no more trouble. Nothing seems changed in the web UI.