Joe Klemmer ( JoeKlemmer@lemmy.myserv.one ) to Linux@lemmy.ml · 3 years agoShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Serversthehackernews.comexternal-linkmessage-square14linkfedilinkarrow-up154file-text
arrow-up154external-linkShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Serversthehackernews.comJoe Klemmer ( JoeKlemmer@lemmy.myserv.one ) to Linux@lemmy.ml · 3 years agomessage-square14linkfedilinkfile-text
minus-squareStarDreamer ( stardreamer@lemmy.blahaj.zone ) linkfedilinkEnglisharrow-up2·3 years agoOne way to do this would be set up crowdsec bouncers on each server but only run a single instance of the crowdsec daemon. Send all logs to the daemon and let it communicate with all the bouncers.
minus-squareShdwdrgn ( Shdwdrgn@mander.xyz ) linkfedilinkEnglisharrow-up1·3 years agoCool, thanks for the tip!
One way to do this would be set up crowdsec bouncers on each server but only run a single instance of the crowdsec daemon. Send all logs to the daemon and let it communicate with all the bouncers.
Cool, thanks for the tip!