Network & services

No plaintext FTP

Databases, remote access and other services reachable from the internet; blocklist status.

Why it matters

FTP logins travel in clear text and are captured by anyone on the path; FTP servers are also a frequent brute-force target.

How to fix it

Moderate · a few hours
  1. Switch file transfers to SFTP (built into SSH) or FTPS.
  2. Close port 21 in the firewall.
ufw
sudo ufw deny 21/tcp

How we test it

The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.

Does your domain pass this check?

Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.

Scan your domain free