Announcement

**Uncle Michael** · December 11, 2015, 01:33 PM

On the Network tab in Settings you can change some settings to deflect this activity. You might also consider using a non-standard port number for HS.

Attached Files

**Ramymounir** · December 11, 2015, 01:38 PM

thanks man

**randy** · December 11, 2015, 02:01 PM

Do what Uncle Michael suggested. That IP address is from Bulgaria.

**Ramymounir** · December 11, 2015, 02:11 PM

i am from Egypt, could it be someone just randomly trying ips?

**Ramymounir** · December 11, 2015, 02:12 PM

he probably thinks it a router? he is trying admin, and cisco

**sparkman** · December 11, 2015, 03:18 PM

Originally posted by Ramymounir View Post

he probably thinks it a router? he is trying admin, and cisco

Likely. Move the HS port that's visible on the outside of the router to a much higher one in the 8000 or 9000 range which will minimize your HS server from being discovered during port scans and then subsequently from being hacked. Leaving it on port 80/443 just invites trouble. Based on one of your other posts you mentioned that someone else takes care of your router so you would need to get them to open the other port and close the default ports. I leave my server at 80/443 internally and then have higher port numbers open from the outside that the router forwards to port 80/443 on the inside.

Cheers
Al

**Planetview** · December 16, 2015, 02:28 AM

If someone was probing my system for a password/login combo like Ramymounir shows and they were to try the default password could they get in or is that only available on the local network if marked as admin and local. I ask because the term local did not mean what I thought when I spoke with HomeSeer support to figure out remote access.

Announcement

is this someone try to hack?

is this someone try to hack?

Comment

Comment

Comment

Comment

Comment

Comment

Comment