Monitoring Connection attempts

[Hugo van der Kooij]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matthew Macdonald-Wallace wrote:
| Hi All,
|
| Before I start coding my own plugin to do this, does anyone know of a
| plugin that monitors the number of external connection attempts over a
| given period of time for a given service and sends alerts accordingly?
|
| I've noticed on a number of servers that we maintain recently that
| there are unauthorised attempts to connect via SSH/FTP.  These appear
| in the log files about 2 seconds apart and are obviously automated.

They are in fact rooted machines running a bot doing the work. these are
around for years and apparantly people still think that they can put up
unpatched servers on the internet.

But unless you will report the server to th owner of the network or
anything like that I think it will be just adrain of resources without
any benefit.

Hugo.

- --
hvdkooij at vanderkooij.org               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and rate those images.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFHzxjfBvzDRVjxmYERApWLAJ0T+XRDxY0QzwX3Gb9hJms8aCs3GACdF/dY
E0w7IE9UPrEFuW0VXcW1Dlg=
=41iP
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null