www.homeseer.com    
 

Go Back   HomeSeer Message Board > HomeSeer Products & Services > HomeSeer General Discussion Area

HomeSeer General Discussion Area General discussion about HomeSeer that does not fall into any other category or are not specific to 1.x or 2.x versions of HomeSeer.

Reply
 
Thread Tools Display Modes
  #1  
Old April 16th, 2018, 01:46 AM
telewizard13's Avatar
telewizard13 telewizard13 is offline
Seer Deluxe
 
Join Date: Jan 2007
Location: Baltimore
Posts: 198
IP Hackers

My system has seen an uptick in IP hack attempts by a Russian bot! Attempts coming from 91.243.80.59. It looks like they are targeting “admin”, “user”, “administrator”, “cisco” and other standard system logins. They then run a series of different pw combinations in rapid succession. I tightened my pw complexity and IP Hacking Lockout parameters in HS. You should too!
Reply With Quote
  #2  
Old April 16th, 2018, 03:52 AM
Moskus's Avatar
Moskus Moskus is offline
OverSeer
 
Join Date: Aug 2007
Location: Norway
Posts: 3,813
This is fairly common, sadly.
__________________
HSPro 3.0.0.435, Z-NET with Z-wave plugin 3.0.1.190, RFXCOM + 2x RFXtrx433E, HSTouch, Squeezebox plugin, iTach IP/WF2IR & GC-100-6 with UltraGCIR, BLDenon, NetcamStudio, Jon00s Webpage builder, Harmony Hub plugin, SCSIP (with FreePBX), Arduino plugin, IFTTT, Pushalot plugin, Device History plugin.
Running on Windows 10 (64) virtualized
on ESXi (Fujitsu Primergy TX150 S8).
WinSeer (for Win10) - TextSeer - FitbitSeer - HSPI_MoskusSample

Are you Norwegian (or Scandinavian) and getting started with HomeSeer? Read the "HomeSeer School"!
Reply With Quote
  #3  
Old April 16th, 2018, 06:40 AM
Malosa's Avatar
Malosa Malosa is offline
Super Seer
 
Join Date: Mar 2013
Location: Home
Posts: 1,536
the last weeks it was really terrible...

but i let homeseer block the ip and transfer to my iptable's in my router to hard block them after 2 try's

they try port 80 and also ssh and other ports, i can see that on my router.

i got more than 50 ip's blocked in 2 weeks now

This dutch provider is terrible for portscans
__________________
Preferred -> Jon's Plugins, Pushover, Phlocation, Easy-trigger,
Rfxcom, Blade Plugins, Pushbullet, homekit, Malosa Scripts



HS3Pro 3.0.0.435 on windows 7 ultimate X64 on hp quadcore laptop 8 GB. 687 Devices, 480Events
Reply With Quote
  #4  
Old April 16th, 2018, 10:14 AM
Tomgru Tomgru is offline
Seer Master
 
Join Date: Nov 2016
Location: Washington State
Posts: 678
Quote:
Originally Posted by telewizard13 View Post
My system has seen an uptick in IP hack attempts by a Russian bot! Attempts coming from 91.243.80.59. It looks like they are targeting “admin”, “user”, “administrator”, “cisco” and other standard system logins. They then run a series of different pw combinations in rapid succession. I tightened my pw complexity and IP Hacking Lockout parameters in HS. You should too!
what is this?
I tightened my pw complexity and IP Hacking Lockout parameters in HS.

thanks
Reply With Quote
  #5  
Old April 16th, 2018, 10:24 AM
Uncle Michael's Avatar
Uncle Michael Uncle Michael is offline
OverSeer
 
Join Date: Feb 2006
Location: Rochester, NY
Posts: 5,939
Quote:
Originally Posted by Tomgru View Post
what is this?
I tightened my pw complexity and IP Hacking Lockout parameters in HS.
I assume pw complexity is length and character choice in passwords. IP hacking lockout parameters can be found under Tools/Setup/Network.

I have chosen to use MyHS for access to HS outside my LAN. I have seen no evidence of intrusion attempts in HS.
Attached Images
 
__________________
Mike____________________________________________________________ __________________
HS3 Pro Edition 3.0.0.435

HW: Stargate | NX8e | CAV6.6 | Squeezebox | PCS | WGL 800RF, Rain8Net+ | RFXCOM | QSE100D | Vantage Pro | Green-Eye | X10:
Compose, XTB-232, -IIR | Edgeport/8 | Way2Call | Ecobee3

Reply With Quote
  #6  
Old April 16th, 2018, 11:03 AM
Tomgru Tomgru is offline
Seer Master
 
Join Date: Nov 2016
Location: Washington State
Posts: 678
Wow... never noticed those before... thanks. Don't see them in any help files, so will have to guess a bit on what they mean.

and more sadly... trying to see where in my router i'd see attempts to break into my network? Look at the logs, but it doesn't show anything that looks relevant.
Reply With Quote
  #7  
Old April 16th, 2018, 11:39 AM
BillBurn BillBurn is offline
Seer Plus
 
Join Date: Oct 2010
Location: Reno, NV
Posts: 114
I was regularly getting a bunch of these but once I changed the HS port from 80 to something well off the beaten path they stopped.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Hackers busy last night concordseer HomeSeer General Discussion Area 6 September 17th, 2017 09:38 AM
Be aware of foscam camera's and hackers ! Malosa Off Topic 12 June 15th, 2016 05:17 AM
HomeSeer II Hack Project Of The Day - for hackers only! homeseergeek General Home Automation Hardware Discussion 1 November 13th, 2006 01:19 PM
Hackers on my site? sbessel Web Server and Interface 13 November 4th, 2003 04:35 PM
Hackers on my site? sbessel Web Server and Interface 0 January 1st, 1970 12:00 AM


All times are GMT -4. The time now is 05:00 PM.


Copyright HomeSeer Technologies, LLC