16
My home network blocked over 5000 sketchy login tries in a single week
I was just checking the logs on my firewall (a basic pfsense box) and saw the count. It was 5,312 blocked attempts, mostly trying to get into my old admin panel port. I guess my public IP got on a list somewhere (maybe from an old game server I ran). The firewall just drops them, but seeing that number made me actually turn on geo-blocking for places I never connect from. Has anyone else seen a jump like this and what did you do next?
3 comments
Log in to join the discussion
Log In3 Comments
hugo6453mo ago
Your old game server basically sent out a "kick me" sign for every bot on the internet.
7
lisak143mo ago
Reminds me of my first website.
2
holly631mo ago
That's a solid wakeup call, right? Five thousand attempts is a lot, but honestly, that's just a typical Tuesday for any public IP these days. @lisak14 once said it reminded them of their first site, and they're spot on. I had a similar scare with my own pfsense box after I stopped running a small game server. The fix that actually made a dent for me was moving the SSH and web admin ports to something non-standard, then locking it down to only allow connections from my VPN IP. Geo-blocking helps a ton too, just make sure you don't accidentally block your own state's IP range if you travel. Have you checked if any of those attempts were coming from the same block of IPs, like from a single cloud provider?
3