I pay for the Nabu Casa subscription for remote access to Home Assistant. Mostly as a way to give them money for a great service, but it’s convenient and felt pretty secure. It should be the only remote way into Home Assistant. About an hour ago I got a login attempt notice that an IP was trying to access API/config. The IP is in some bad IP databases. What I found interesting was that the log shows an AI bot. A Google Gemini bot specifically. Makes me worry that AI is going to make yet another aspect of life frustrating and unfun.
104.28.222.47? That one showed up in a log yesterday for me. Super glad the latest update added the option to see the IP for login attempts.
This one was 66.187.5.19. I tried to find a way to report their behavior on hostodo (the service they’re using) but they don’t seem to have a report option. I’m guessing because they don’t want to prevent this kind of thing.
They have options. No idea if they actually do anything for the reports, but it’s worth a shot.
the whois info for the IP might have an abuse email address, try that
Can confirm it does:
OrgAbuseHandle: ABUSE9107-ARIN OrgAbuseName: ABUSE OrgAbusePhone: +1-313-516-8908 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9107-ARIN