this post was submitted on 17 Apr 2025
15 points (100.0% liked)

homeassistant

14104 readers
30 users here now

Home Assistant is open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts. Perfect to run on a Raspberry Pi or a local server. Available for free at home-assistant.io

founded 2 years ago
MODERATORS
GreatAlbatross@feddit.uk
greatalbatross@lemmy.world
15
Is it normal to not have any malicious login attempts? (reddthat.com)
submitted 2 weeks ago by hit_the_rails@reddthat.com to c/homeassistant@lemmy.world
11 comments fedilink hide all child comments
 

I've been running Home Assistant for three years. It's port forwarded on default port 8123 via a reverse proxy in a dedicated VM serving it over HTTPS and is accessible over ipv4 and ipv6. All user accounts have MFA enabled.

I see a notification every time there's a failed login attempt, but every single one is either me or someone in my house. I've never seen a notification for any other attempts from the internet. Not a single one.

Is this normal? Or am I missing something? I expected it to be hammered with random failed logins.

you are viewing a single comment's thread
view the rest of the comments
[–] chrash0@lemmy.world 4 points 2 weeks ago

that seems abnormal, but if you’re worried about people creeping into your infra, you could add a VPN for an extra layer of security. i use Tailscale, and it works like a charm