	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.8

Block FTP brute force attempts

Asked by ITDeptAtPCS in Enterprise Firewalls, FTP Servers

Tags: ftp, hack, prevent, brute force, bot

Hi all,

I frequently see brute force attempts at finding usernames in my FTP server logs all of the time. Someone will try to connect to the FTP server from an IP address (usually coming from China) repeatedly, using a dictionary attack of different usernames A through Z.

Does anyone have any ideas on how to block an IP from attempting to connect after 10-15 attempts?

I'd like to be able to do this on the firewall level, as we have a SonicWALL NSA 3500, and this would prevent any unneccassary traffic from entering the network. But if we had to do it on the server level, it's IPswitch WSFTP Server 6.1.

Any ideas?

Thanks!

View the Solution FREE for 30 Days

20091111-EE-VQP-92 - Hierarchy / EE_QW_4_20070622

Hall of Fame

1. keith_ala...82,100
2. deimark54,265
3. JFrederic...43,500
4. dpk_wal41,050
5. lrmoore34,450
6. ccomley33,960
7. grimkin22,976
8. MikeKane22,400
9. PeteLong19,164
10. 3nerds15,000
11. sangamc12,800
12. rsivanandan12,650
13. ikalmar11,249
14. bignewf11,164
15. nodisco11,100
16. uetian170710,134
17. kenboonejr9,425
18. VisionVoice9,000
19. decoleur8,550
20. stsonline7,500
21. pwindell6,900
22. jodylemoine6,500
23. Bembi6,000
24. harbor2355,500
24. asavener5,500
24. Jay_Gridley5,500

1. lrmoore1,600,373
2. keith_ala...605,928
3. calvinetter244,408
4. rsivanandan242,988
5. tim_holman196,866
6. nodisco185,714
7. batry_boy159,024
8. grblades127,009
9. Voltz-dk111,609
10. PeteLong102,309
11. dpk_wal97,550
12. JFrederic...83,100
13. carribeant...80,185
14. Cyclops3...78,576
15. stressedo...71,924
16. harbor23568,605
17. srikrishnak60,096
18. MikeKane56,928
19. deimark55,615
20. pruecons...55,203
21. ccomley54,304
22. jjoseph_x48,002
23. billwharton44,427
24. td_miles43,372
25. RobWill42,673

Block FTP brute force attempts

Asked by ITDeptAtPCS in Enterprise Firewalls, FTP Servers

Tags: ftp, hack, prevent, brute force, bot

About this solution