Selfhosted

60409 readers

872 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

Is it normal to not have any malicious login attempts? (reddthat.com)

submitted 1 year ago by hit_the_rails@reddthat.com to c/selfhosted@lemmy.world

17 comments fedilink hide all child comments

cross-posted from: https://reddthat.com/post/39309359

I've been running Home Assistant for three years. It's port forwarded on default port 8123 via a reverse proxy in a dedicated VM serving it over HTTPS and is accessible over ipv4 and ipv6. All user accounts have MFA enabled.

I see a notification every time there's a failed login attempt, but every single one is either me or someone in my house. I've never seen a notification for any other attempts from the internet. Not a single one.

Is this normal? Or am I missing something? I expected it to be hammered with random failed logins.

you are viewing a single comment's thread
view the rest of the comments

[–] The_Zen_Cow_Says_Mu@infosec.pub 1 points 1 year ago (1 children)

.... that you know of.

I have crowdsec running on my caddy reverse proxy for my home server and it's logging and blocking at least 10-20 hostile IP addresses trying to do port scans/other automated script hacks every day.

[–] driving_crooner@lemmy.eco.br 1 points 1 year ago

"The difference between attack and defense, is that you know your attacks are failing" -someone at a CCC.