Getting a lot of login attemps with Cliudflare

Third party integrations
1

I recently set up remote access with the Cloudflared app and I purchased a domain from Cloudflare. I enabled all the security features and bot protection that Cloudflare offers, but I get a ton of sign in attempts from what i presume are bots. Is there a way to protect myself from this such as using a sub domain? Right now I just have it set straight to my domain. Example: https://mydomain.net

2

Hello Star Wagon,
Welcome to the Home Assistant Forum.

Are any of these sign-in attempts from an address that starts with 192.168.x.x or 10.x.x.x or 172.x.x.x?

3

I am getting them daily. In the logs it shows lines which include:

Requested URL: '/media/wp-includes/wlwmanifest.xml'

Those are WordPress malware bots, just scanning the internet for not protected hosts. Annoying.

See also Should i be worried? if so how do i fix this ( ips being banned )

4

Sure, just make up a hostname and add it in the first field of the add-on/app configuration. The more random the hostname, the better, e.g. UUID or part of it:

9f562081-fe2e-400c.mydomain.net
5

Ok thank you, I got that set up and I blocked all AI crawler bots so I think that should do it!