PaulDotCom mailing list archives

Ideas for Securing my FTP Server


From: iamnowonmai at gmail.com (iamnowonmai)
Date: Sat, 21 Mar 2009 12:27:01 -0400

Take a look at OSSEC-HIDS. It can do some active blocking for X amount of
time after Y unsuccessful attempts. Plus much more.HTH
iamnowonmai

2009/3/21 Shaun Curry <shauncurry1 at gmail.com>

Hello all!

Does anyone have suggestions for my current situation?  I have found that
someone has been trying to brute-force login to my FTP Server, so far they
have been unsuccessful.  I don't think they are using any tools or software
to do this.  They have just been using a user name like administrador and
trying passwords til it times out.  I have blocked his IP, but that can be
changed easily.  I have his IP and thats about it.  Can I simple change the
port that my FTP connects on?  This should reduce the risk of someone
"stumbling" onto my ftp, right?

Any ideas on a cheap IDS (aka free) system that might catch something like
this in the future.

Thanks
Shaun

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090321/4fd7fd4c/attachment.htm 


Current thread: