News for hackers. Stuff that matters.

A comment on The Honeypot Diaries: Thousands of Daily Attacks on My Home Network.

Re:The Honeypot Diaries: Thousands of Daily Attacks on My Ho... by oger on Saturday October 07, 2023 @07:13AM (#37800750)
What are good and battle proven tools to

A) monitor traffic on my home network - especially in a MikroTik environment

B) identify malicious activity

Thx

[ Parent | on HN ]
Re:The Honeypot Diaries: Thousands of Daily Attacks on My Ho... by lormayna on Saturday October 07, 2023 @07:37AM (#37800853)
I have a Mikrotik at my home too. Beside securing the device, I suggest to filter and logs all the DNS queries and to export netflows and firewall logs somewhere (ELK or clickhouse).
[ Parent | on HN ]
Re:The Honeypot Diaries: Thousands of Daily Attacks on My Ho... by tamimio on Saturday October 07, 2023 @11:05AM (#37802299)
Just drop all inbound and access your home network behind a vpn remotely for the ultimate protection, not perfect, but far more secure. And monitor at the DNS level, or have a service running to monitor network activity on the terminals.
[ Parent | on HN ]