# Advice on any security concerns accepting HTTP posts from public facing port?

**URL:** <https://discourse.nodered.org/t/advice-on-any-security-concerns-accepting-http-posts-from-public-facing-port/84040>\
**Category:** General\
**Tags:** security\
**Created:** [26 December 2023 14:52 UTC](https://discourse.nodered.org/t/advice-on-any-security-concerns-accepting-http-posts-from-public-facing-port/84040 "2023-12-26T14:52:33Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![jodelkoenig](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jodelkoenig/32/44645_2.png) [@jodelkoenig](https://discourse.nodered.org/u/jodelkoenig)\
**Post date:** [26 December 2023 15:21 UTC](https://discourse.nodered.org/t/advice-on-any-security-concerns-accepting-http-posts-from-public-facing-port/84040/2 "2023-12-26T15:21:14Z")

</div>

There have been recent reports about hacked node red instances, right after ports have been opened on routers. Hence I'd be really really careful. There are bots waiting for you. And I guess its independent from the ports you use.

> [@Nodered hacked by adding invisible nodes](https://discourse.nodered.org/t/nodered-hacked-by-adding-invisible-nodes/83860):
>
> Hello Everyone My nodered server has been hacked, by adding some invisible nodes to my flows.json while I was working on it. I detected it because of a nodered message stating that some nodes where changed without ay action from me. Looked like someone edited another instance of the flows.json file. Consequence was that server (a RPi) was damaged and had to reformat and resintall everything. Well, of course I might have made some mistakes in securing my server to allow that, but as my knowle…

> [@All flows have disappeared on AWS hosted system](https://discourse.nodered.org/t/all-flows-have-disappeared-on-aws-hosted-system/83569/2):
>
> How do you expose your AWS Ubuntu instance to the internet? It might be related: As for recovery. Does AWS do backups or snapshots for instances?

---

_[View the full topic](https://discourse.nodered.org/t/advice-on-any-security-concerns-accepting-http-posts-from-public-facing-port/84040)._