Intrusion Detected No Alert RBDev
    Intrusion Detected No Alert RBDev
        Intrusion Detected No Alert Synametrics Support
    Intrusion Detected No Alert RBDev

From: RBDev
Date: 7/22/19 3:48 PM
Topic: Intrusion Detected No Alert
Type: General Discussions
Post a follow up

Hi all,

 

My server keeps getting attacked, it does list in the intrusion detection page but I'm not getting any email alert.

Isn't Xeams suppose to send an email alert to admin address when this happens? 

Do I have to turn something on?

 

Cheers

Top

From: RBDev
Date: 7/22/19 4:12 PM
Topic: Intrusion Detected No Alert
Type: General Discussions
Post a follow up

I changed to a different email and it started working ..... 

Top

From: Synametrics Support
Date: 7/22/19 4:18 PM
Topic: Intrusion Detected No Alert
Type: General Discussions
Post a follow up

I am not sure what you mean by "different email" and it started working. Did you change the email address of the administrator?

In any case, Xeams won't generate alerts for every entry attempt. The intrusion detection logs simply lists abnormal connections - not necessarily attacks. Instead, refer to InvalidPasswordAttempts.log to see who is trying to guess passwords. Xeams will generate alerts if it detects too many invalid password attempts from a single IP.

Top

From: RBDev
Date: 7/22/19 7:12 PM
Topic: Intrusion Detected No Alert
Type: General Discussions
Post a follow up

I changed to a different email and it started working ..... 

Top