I just seen in my notifications from home assistant that I had a failed login early the morning of Oct 1, 2026 from an ip 104.28.222.47… that’s not on my local network and wonder if others might have an idea if I have an inside device or mischievous code running on a device.. I have a few thirdreality Zigbee, many esphome wireless and a few pi with current os.. I ask google about the ip and it reply with cloudflare.. my bank using cloudflare for human detection but was not on or trying at 4:27 in the morning unless ha logs notification at utc time..
Block the IP, in your firewall on your Router
Strange That Your Google didn’t suggested that
https://www.abuseipdb.com/check/104.28.222.47 .
Hi, welcome to the forum!
I had a visit from 104.28.222.46 yesterday…
Third time in 10 days that I have a visit from a foreigner.
Make sure you use MFA!
seems best would be to block the whole sub-net /24
been going on for quite awhile, weird cloudflare hasn’t reacted upon this
Using Nabu Casa or have 8123 open on the internet?