Malicious connections

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
Carlos Villalba
Posts: 2
Joined: Tue Dec 14, 2021 2:02 pm

Malicious connections

Post by Carlos Villalba »

Hi Nagios team

I have a question, I detected these connections from my Nagios server trying to enter my Radius server with different ports.. Is this behavior normal?
You do not have the required permissions to view the files attached to this post.
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: Malicious connections

Post by ssax »

Do you know what those IP addresses are?

Is your XI server's web interface publicly available? If so, make sure you lock it down to through a firewall to known hosts.

Are you doing any radius checks on your XI server?

Please PM me a copy of your profile.zip, you can download it from Admin > System Profile by clicking the Download Profile button.
Locked