Geoblock (or geoallow) hass.io

[kiwijunglist (Mike Stewart)]

Hi

I’m worried about the potential for getting hacked on my open ports (hassio https port and mqtt public port) both have passwords.

Are there any addons for either hassio or something else where i can geoblock the open ports?

I found this website that lets you download an allow or block list that is country specific.

http://www.ipaddresslocation.org/ip_ranges/get_ranges.php

I figured if i blocked access from outside of nz, i’d be a lot more secure.

Thanks
Kiwi

[kiwijunglist (Mike Stewart)]

Otherwise is there a log that you can setup that records all the IP addresses that are accessing / attempting to access h.a. so i can look through that list?

[silvrr]

@kiwijunglist

Otherwise is there a log that you can setup that records all the IP addresses that are accessing / attempting to access h.a. so i can look through that list?

Check your router log, not sure if all routers do but even my cheap old netgear router logged connections like this.

There are a few feature requests for something like this, they don’t seem to gain traction.

Connected clients' IP address information

I would like to have all connected client’s IP address for security reason. I tried this by changing log level (debug/info) for logger config for homeassistant.components.http, homeassistant.components.websocket_api and homeassistant.components.api but not getting the IP address. Tried making custom component from api_streams component but that has no details of incoming connections. Appreciate any help to achieve this.