Monitoring Connection attempts

[Bob Amen]

Matthew Macdonald-Wallace wrote:
> Hi All,
>
> Before I start coding my own plugin to do this, does anyone know of a
> plugin that monitors the number of external connection attempts over a
> given period of time for a given service and sends alerts accordingly?
>
> I've noticed on a number of servers that we maintain recently that
> there are unauthorised attempts to connect via SSH/FTP.  These appear
> in the log files about 2 seconds apart and are obviously automated. 


    Better than checking for this is to block them with iptables. Take a 
look at http://denyhosts.sourceforge.net/ which we use on our outward 
facing servers. It comes with notification via email as a bonus. As 
others have mentioned even reporting this abuse to the owners/ISPs is 
pretty useless.

Bob

-- 
				Bob Amen
			    O'Reilly Media, Inc.
			    http://www.ora.com/
			  http://www.oreilly.com/


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null