Security Threats

Hi all,

I’ve recently setup my UDMPro and notice that apparently my Home-Assistance instance is constantly being attacked.
Any thoughts or ideas of what this is ?

Thanks in advance.

Have you opened any ports to allow remote connection to Home Assistant?

If so, you can expect a lot of this. There are known (old and no longer effective) attack methods for HA.

Make sure you have a strong password and multi factor authentication enabled.

Pretty much anything exposed to the internet is always going to have some noise. Low-effort scans and basic attacks. An easy way to reduce these is to restrict incoming traffic to only the countries you’re expecting. For example, if you live in the US, restrict incoming traffic to HA to only the US. Note that if you use any integrations that rely on websockets (such as the SmartThings integration) you’ll want to also make sure to allow any countries those companies use for their datacenters.