Hit exactly 1,000 failed login attempts on my router in a single month last August

I was checking my home router logs out of boredom one night and saw it hit exactly 1,000 failed login attempts in August. Turns out some botnet was hammering my IP from three different countries every few minutes. Has anyone else ever checked their router logs and found something that made them paranoid?

2 comments

2 Comments

aaronsullivan4d ago

Disable remote admin access and change your default SSH port right now.

riverdavis4d ago

And the wild part nobody's talking about - those bots might be more interested in your network layout than actually getting in. @aaronsullivan is right about locking it down, but check what else they scanned. I caught mine pinging every device IP on my subnet, mapping my whole home setup. That creeped me out more than the failed logins.