Warning notification

I have just had a warning notification, as follows:

Logger: homeassistant.components.http.ban

Source: components/http/ban.py:138

Integration: HTTP (documentation, issues) First occurred: 31 August 2026 at 23:55:51 (1 occurrence) Last logged: 31 August 2026 at 23:55:51

Login attempt or request with invalid authentication from localhost (127.0.0.1). Requested URL: ‘/api/config’. (Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36)

Should I be concerned?

Depends, did you yesterday at 23:55:51 try to login with the wrong credentials from your mobile device? :thinking:

Different endpoint so might not be the same but there is some advice here: Is my system compromised? - #5 by cogneato