I Analyzed 22 Million NPM Requests. Zero Were External Attacks.
This Reddit post made the rounds a while back. The author parsed 30 days of Nginx Proxy Manager logs and found 1.16 million attack requests out of 5.4 million total. WordPress scans, webshell probes, secrets hunting, Log4Shell attempts – the full catalog of internet background noise. It was a good read and made me wonder what my own logs looked like. My setup is different from theirs. I run OPNsense as my edge firewall with strict VLAN segmentation. The homelab lives on a dedicated VLAN behind the firewall. NPM routes traffic to about 26 services. Remote access is through Tailscale – no ports forwarded from the WAN. ...