[olug] more secure FTP server?

[Lou Duchez]

So one of my Web sites got hacked via FTP.  Looking into it, here is the 
problem.  I am running VSFTPD, and I am also running Fail2Ban to monitor 
the VSFTPD log and detect failed login attempts.  It's a good system.  
It's a nearly flawless system.  The one flaw in this is, apparently, 
VSFTPD doesn't bother to write much of anything to the log(s) when there 
are errant login attempts, so Fail2Ban doesn't have anything to work with.

Does anyone know how to make VSFTPD more talkative in the case of failed 
logins?  Or can anyone recommend a better FTP server, one that bothers 
to log these things properly?

I realize that there are other measures I can take too, such as limiting 
the IPs, changing the port, and not using FTP except when nothing else 
will do.  And I'm looking into that.  but I'd also like to be running a 
good FTP server.