Login attempt or request with invalid authentication - googleusercontent

Configuration
1

I keep getting error messages like the following:

Login attempt failed
Login attempt or request with invalid authentication from 242.23.83.34.bc.googleusercontent.com (34.83.23.242). See the log for details.

Looking in logs I see this:

Logger: homeassistant.components.http.ban
Source: components/http/ban.py:136
integration: HTTP (documentation, issues)
First occurred: 6:46:53 AM (1 occurrences)
Last logged: 6:46:53 AM

Login attempt or request with invalid authentication from 242.23.83.34.bc.googleusercontent.com (34.83.23.242). Requested URL: ‘/media/system/js/core.js’. (Go-http-client/2.0)

Any idea how to troubleshoot or fix this?

2

that kinda looks like a google cloud vm hitting your login. do you have your home assistant on the internet? if so, it may be a random bot or crawler or hacker coming from a gcp vm.

3

@armedad HA is exposed through cloudflare tunnel.

4

I’m having the exact same problem as reported by OP, so super keen on figuring out where this is coming from.

I too have HA exposed through Cloudflare as OP does, but that’s all working as I can access HA remotely; so that can’t be the problem.

The only other thing I can think of, as all my integrations are working, is that I trialed the HA Cloud service, so maybe that’s trying to authenticate?

Is there any way of adding more verbose logging in one area?

5

I never tried HA Cloud FWIW. Cloudflared is working fine for access. It’s not that. It is consistent with a bot of some kind. I’m not sure who/why or how to log better to solve it though. Hopefully someone has tips!

6

Hi all, same issue here. I’m accessing externally with cloudflare.

Any suggestion to fix the problem?

7

I used the security tab from cloudfare site, blocked anything that showed heavy traffic shown in analysis.

8

Well, I saw this:

I haven’t gone down that path. Frankly I’m a little overwhelmed managing things on cloudflare. Their website is simultaneously slick yet difficult for me to navigate. Especially with my limited knowledge in this arena not to mention things being split between CF and zero trust web portals :frowning:

9

Hi all, i’ve been able to manage directly with Cloudflare web site padding some rules on the firewall.

I can try to help if is needed.

For the moment I blocked all the areas out of my country.

10

Yup same here, the notifications are driving me insane.

Also, do you have the Google Assistant integration? I’m wondering if maybe that’s causing it.

11

I also get this from time to time, and I am not running Cloudflare or Google Assistant, I have ngnix in front of HA.
It’s probably something running in GCP scanning wide ranges of ip addresses.