Is there a way to minimize Brute Force Attacks?

[jim.thornton]

I'm running CSF & LFD.
I've got DA setup with Brute Force Attack Monitoring
I've got DA setup when it detects a BFA that it will manually run the command to add the IP to the Deny file in CSF.

That said, I'm getting upwards of 100 emails per day of BF attacks on the server. The usernames that are showing up in the emails don't exist, so I would assume that there is no threat there, but is there anything more that I can do to reduce the amount of BF attacks?

 

[scsi]

What service are they attacking?

 

[jim.thornton]

Right now, primarily pure-ftpd but also exim2.

Occasionally I see them for eximi3 too.

The usernames don't usually exist, however, there are sometimes they get the usernames right. Sometimes I see {login} as the attempted username.