Forum Discussion

ashish_solanki's avatar
ashish_solanki
Icon for Cirrus rankCirrus
Mar 05, 2019

Brute Force Attack on FTP server

Hi All,

 

Need immediate help, one of our FTP server is facing brute force atack for which we have configured VIP on F5 LTM. Tried blocking the public IP addresses on firewall but still getting attack. Please suggest if anything that can be done at load balancer end and also suggest the tcpdump comman to be use for capturing the packets.

 

Thanks in advance!!

 

application delivery
BIG-IP
bruteforceattack
ftpserver
  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Mar 05, 2019

    If you know that it is a specific IP address then you can create a reject VS listening on the same IP and port with a specific source address to attract the traffic.