vsftpd - block ip after failed login
 

hello,

i use vsftpd, i disabled anonymous users. sometimes i look at the log-files.

and there are much entries from bots. they try to connect to the ftp with users like apache or tomcat. they try it 10, 20, 30 or more times.

can i block them with vsftpd after 5 failed logins for 1 hour or something like this?


best regards
toredo

Check out a combination of 'iptables -m recent' and fail2ban or denyhosts?

i dont have installed iptables, because in the kernel, there is netfilter not included.

and i dont like to compile a new kernel. is there not a second way?

thx 4 answer

best regards
toredo

One possible alternative would be to have Fail2ban use TCP wrappers instead of iptables.