Advice on any security concerns accepting HTTP posts from public facing port?

[jodelkoenig]

There have been recent reports about hacked node red instances, right after ports have been opened on routers. Hence I'd be really really careful. There are bots waiting for you. And I guess its independent from the ports you use.

Nodered hacked by adding invisible nodes

Hello Everyone My nodered server has been hacked, by adding some invisible nodes to my flows.json while I was working on it. I detected it because of a nodered message stating that some nodes where changed without ay action from me. Looked like someone edited another instance of the flows.json file. Consequence was that server (a RPi) was damaged and had to reformat and resintall everything. Well, of course I might have made some mistakes in securing my server to allow that, but as my knowle…

All flows have disappeared on AWS hosted system

How do you expose your AWS Ubuntu instance to the internet? It might be related: As for recovery. Does AWS do backups or snapshots for instances?