Login attempt failed on /media/...: someone knocking at the backdoor?

Configuration
,
1

My HA is exposed through NC and I’m using MFA so I’m not very worried.

It’s the first time that I get a failed attempt from an unknown source.
If I try to log in myself with wrong credentials the requested URL starts with '/auth/login_flow/...

This is what I have though for that other failed attempt:

image
image1367×417 52.6 KB

As it shows, the requested URL is different.
I’m curious for how this can be explained.

2

NC URLs are not private, anyone can look up a list of them.

Your logged intrusion attempt is from a known malicious source: https://www.abuseipdb.com/check/45.61.185.216