[slbmeh]

If you must use FTP instead of S/FTP do it through an ssh tunnel where possible. This will hide your plain text passwords and data. Also install and configure fail2ban...

Edit: oh... and chroot it...