Was my raspberry hacked?

• docker-fail2ban

  9 604 6.5 Dockerfile

  Fail2ban Docker image

If you are running docker for your stuff, crazy-max dockerized fail2ban works well. Just be sure to export any form of logs out of what you want to protect and into the fail2ban container.

• Fail2Ban

  49 10,501 8.8 Python

  Daemon to ban hosts that cause multiple authentication errors

  

If you are worried about hacking attempts, installing fail2ban will help.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• masscan

  64 22,670 7.8 C

  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Takes about 5 minutes to hit the entire internet with masscan. I get countless masscan pings on my rpi everyday (it identifies itself in the user agent unless the scanning party has changed it).

• crowdsec

  169 7,804 9.6 Go

  CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

  

One could also use CrowdSec- think of it as a modern (and also free and open source) version of f2b using crowd sourced threat intelligence - and capable of working with much more versatile data and making way more advanced decisions. Crowdsourced in this context means that CrowdSec users share threat intel on attacks anonymously and helping each other in that way. By default (and out of the box) OP would be protecting both their web- and ssh access in this case. On top of that there's a fancy and free to use web console that can give you all sorts of graphs and info on what's going on.

Suggest a related project