AWS EC2 failed login attempt

Configuration
1

I got the following failed login attempt.
The weird thing is, I only access HA with a VPN.
Only nginx (which does not allow outside connection to HA) and a couple unrelated ports accessible from the outside.

How was an outside entity able to attempt login?

Logger: homeassistant.components.http.ban
Source: components/http/ban.py:136
integration: HTTP ([documentation]
First occurred: March 19, 2026 at 07:19:30 (1 occurrence)
Last logged: March 19, 2026 at 07:19:30

Login attempt or request with invalid authentication from ec2-54-224-53-207.compute-1.amazonaws.com (54.224.53.207). Requested URL: ‘/media/system/js/core.js’. (Go-http-client/2.0)

2

If the ip address is not one that your VPN uses, then it happens. If you don’t want it to happen don’t expose your instance to the internet.

3

How did happen is my question?

4

There are two possibilties:

  • It is part of your VPN setup.
  • It’s something else.

Without some details on your VPN its not possible to say.

5

Well, if you on your VPN tried to connect from that IP address and your login failed, it would do that.
If I right now tried to log in from that ip address and failed, it would do that.

Basically a failed login attempt. Most likely from you, but doesn’t have to be.
Does >

sound familiar at all?
Accessing this using Plex or Jellybean or something?

People scan the net, looking for things and trying things.

6

my VPN is wireguard hosted at home on proxmox. So no, it’s not it

7

does not sound familiar, am guessing it’s part of home assistant?
Also, HAOS is running in it’s own VM with it’s own local IP
It was 7am, no one was active at that time