Had a couple of these in the last few days from what appears to be different sources Just need some advice on making sure my HA is as secure as it can be I have just enabled 2FA for my HA login is there any thing else I should do please? Thanks Logger: homeassistant.components.http.ban Source: …

[image] Nobber: wlwmanifest.xml Another user came with exactly the same thing: [image] Should i be worried? if so how do i fix this ( ips being banned ) Hello. Ive recently started using a cloudflare domain with cloudflared so i can acces my HA instance outside m…

Thanks that didnt come up in my search Whats the connection, well i have just set up clouldfare as well… Any ideas whats going on here Thanks

I am also using couldflare getting the same failed attempts a lot. Logger: homeassistant.components.http.ban Source: components/http/ban.py:82 Integration: HTTP ( documentation , issues ) First occurred: February 6, 2023 at 11:44:04 AM (6 occurrences) Last logged: 6:52:27 AM

mmm wonder if this is a cloudfare issue or maybe I have setup something wrong

I had this as well when I switched over to Cloudflare some time ago. I just assume this is people scanning for open ports/urls since HA is now exposed to the WWW. To overcome this and secure my HA I set my password to a random generated password. Did this for all my HA users. Then I enabled IP ban …

Thanks for the reply, I’ve had a look at the link thanks, maybe one day I’ll be able to understand how to do it :wink: (Very new to HA) Knowledge base, Google and YouTube will help 5 ESSENTIAL Tips for Security on Home Assistant Just watched this and sorted it thanks Thank you

[image] Nobber: 5 ESSENTIAL Tips for Security on Home Assistant Just watched this and sorted it thanks No problem :grinning: Thats the same video I watched when I started having this issue! Glad you were able to get it sorted.

Now I just need help with configuring Rfxcom in my other post :wink:

Topic solved - by accident :slight_smile: The most important part is missing from the documentation. It is required that WebSockets be enabled in the domain where we are making the tunnel. Cloudflare ->[ www.exmaple.com ]->Network->WebSockets = ON and the settings in the main Home Assistant config…

Cloudfare Issue? - Security Login Attempt Invalid Authentication - Advice please

Configuration

EdwardTFN (Edward Firmo) February 7, 2023, 7:27am 2

Another user came with exactly the same thing: