Support

Admin Tools

#16305 Central Aggregation of IP blocked and attack vector stats

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Thursday, 06 June 2013 10:49 CDT

Thursday, 06 June 2013 08:37 CDT

8Dweb
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? No
Have I searched the tickets before posting? No
Have I read the documentation before posting (which pages?)? No
Joomla! version: 2.5 and 3.1
PHP version: 5.3
MySQL version: not posted
Host: (optional, but it helps us help you)
Admin Tools version: latest

Description of my issue: I am wondering if there is a central component for gathering stats from all our Akeeba Pro sites - in addition a central aggregation method for gathering blocked IP's - particularly those blocked for template and username/pw violations

:)
- Matt
Edited by 8Dweb on 2013-06-06 08:40 CDT

Thursday, 06 June 2013 08:52 CDT

nicholas
Nope, there isn't and we have no plans on making such a feature available. It actually doesn't make sense to block an IP for more than an hour (only stupid script kiddies will use the same IP address for longer than that attacking a single site – and they usually don't get any results due to the naivety of their "attacks"). Having a centralised sync running much faster than that would end up depleting your server resources, essentially acting as a denial of service attack to yourself.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Thursday, 06 June 2013 09:01 CDT

8Dweb
Perhaps my question was not clear.

I am much more interested in processing information, aggregated from multiple sites across our several hosting clusters... Trends are important in over-all server management, and as our akeeba installed base grows, being able to see trends in IP's blocked as well as attack vectors is an important administrative tool.

I am not requesting centralized blocking per sae, but a way to have the stats from multiple sites turned into usable stats in a centralized method - of course without compromising security on the individual site.

In any case, thanks for the quick reply.
- Matt

Thursday, 06 June 2013 10:49 CDT

nicholas
If you're really into it you can create database triggers which reproduce the INSERTs to the #__admintools_logs table against an aggregate table stored in another database, possibly with an added key indicating the site name / source database. I can't think of any simpler way. Yes, I know it's not a simple way, but I can't think of anything else :(

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!