Hi,
Only just noticed that in connections that there are some unknown www & WAN IP's.
e.g. hat.census.shodan.io
teliacarrier-cust.com
Settings : I have 20 logins, usual ban after 5 attempts, release after 1 hour.
Have pretty good PW.
They all have 0:00:00 as session & 0 frames. If they had got through, would it show session time?
1) Is this simply brute force attempts that are not getting through. Is it likely specifically for BI or just hackers scanning for open ports etc.
I have windows firewall, NAT etc and port forwarding for the server PC so guess with no PW enabled could get through easy.
2) I did not have a password for local connection, I am adding now. Was this ever a risk on the local.
3) I have some local IP in the advance allow setting e.g. ^192.168.1.88. I am accessing the database from python scripts and had security issues
Which lead me to my second, more worrying point, during this time I had removed the password from admin to test the script, stupidly forgot to put back so probably did have access to my BI for 48 hours.
I have now of course changed passwords, as far as recordings, only outdoor security so nothing sensitive or of any value. Could they gain access to other stuff on the LAN via BI.
I will mention that I am logging into the remote PC (windows 10) via google RDP but image that is not related to the above, unknown www & IP's.
Only just noticed that in connections that there are some unknown www & WAN IP's.
e.g. hat.census.shodan.io
teliacarrier-cust.com
Settings : I have 20 logins, usual ban after 5 attempts, release after 1 hour.
Have pretty good PW.
They all have 0:00:00 as session & 0 frames. If they had got through, would it show session time?
1) Is this simply brute force attempts that are not getting through. Is it likely specifically for BI or just hackers scanning for open ports etc.
I have windows firewall, NAT etc and port forwarding for the server PC so guess with no PW enabled could get through easy.
2) I did not have a password for local connection, I am adding now. Was this ever a risk on the local.
3) I have some local IP in the advance allow setting e.g. ^192.168.1.88. I am accessing the database from python scripts and had security issues
Which lead me to my second, more worrying point, during this time I had removed the password from admin to test the script, stupidly forgot to put back so probably did have access to my BI for 48 hours.
I have now of course changed passwords, as far as recordings, only outdoor security so nothing sensitive or of any value. Could they gain access to other stuff on the LAN via BI.
I will mention that I am logging into the remote PC (windows 10) via google RDP but image that is not related to the above, unknown www & IP's.