Blue Iris

Is the web server feature getting automatically enabled in recent updates?

I ask because I've had it disabled for the last year, but I notice after a recent update it was re-enabled. I'm absolutely 100% sure that I hadn't enabled it.

I was seeing attempted logins from all over the world (not surprising) but none were able to get it.

Has anyone else noticed this?

Interesting. For the fearless (one of which I am not), you could test it by reverting to a previous release, set web server how it's supposed to be, then update again and see. Mine is enabled but there's no access outside of my LAN, so I don't think about it. Only IP addresses on the LAN get authenticated.

Yes, it's surprising how many login attempts an open port will have.

If you want a nail biter.... have a look at your router log, and all the 'unknown' traffic it's blocking (and where there coming from)!

That's true for everyone - it's the nature of the internet. Just like in any neighborhood, make sure your doors and windows are locked, and get a dog. VPN and router rules with firewall and Windows firewall are about all you need. You can't stop people from knocking on the door and checking the lock, but you can stop them from entering.