Matthew Macdonald-Wallace wrote:
> Hi All,
>
> Before I start coding my own plugin to do this, does anyone know of a
> plugin that monitors the number of external connection attempts over a
> given period of time for a given service and sends alerts accordingly?
>
> I've noticed on a number of servers that we maintain recently that
> there are unauthorised attempts to connect via SSH/FTP. These appear
> in the log files about 2 seconds apart and are obviously automated.
Better than checking for this is to block them with iptables. Take a
look at http://denyhosts.sourceforge.net/ which we use on our outward
facing servers. It comes with notification via email as a bonus. As
others have mentioned even reporting this abuse to the owners/ISPs is
pretty useless.
Bob
--
Bob Amen
O'Reilly Media, Inc.
http://www.ora.com/
http://www.oreilly.com/
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue.
::: Messages without supporting info will risk being sent to /dev/null
