Block Brute Force Attacks Against sshd and proftpd

[rohit]

Hi All,

We have getting alot of false login attempts on proftpd lately. Do we know any good way to stop this as this really slows down the server and can also be considered dangerous if someone might gets in.

I recently came across this article that mentions about using BlockHosts. Has anyone used this before or is something good that can be used to prevent this from happening. Below is the reference link that explains a bit about BlockHosts.

http://freebsd.munk.me.uk/archives/...gainst-sshd-and-proftpd-Using-blockhosts.html

Any feedback from anyone would be highly appreciated. I guess this must be a common problem happening with all the servers running FTP services.

Thanks Heaps in advance

Rohit

 

[smtalk]

Try APF+BFD (Brute Force Detection) and change the default ssh port. Good luck.