Page 1 of 1

Malicious connections

Posted: Fri Dec 17, 2021 1:17 pm
by Carlos Villalba
Hi Nagios team

I have a question, I detected these connections from my Nagios server trying to enter my Radius server with different ports.. Is this behavior normal?

Re: Malicious connections

Posted: Mon Dec 20, 2021 11:10 am
by ssax
Do you know what those IP addresses are?

Is your XI server's web interface publicly available? If so, make sure you lock it down to through a firewall to known hosts.

Are you doing any radius checks on your XI server?

Please PM me a copy of your profile.zip, you can download it from Admin > System Profile by clicking the Download Profile button.