I have a Debian server with a dyndns hostname and a open 22 port on my router (DLINK DSL-2640B) because i need to remote-ssh my server. The Debian machine itself is extremely secure but some hackers were able to hack into my router , in fact firstly i saw some weird open ports that I did not open , but i thought my colleague opened it so i did not really care about it. Next day i was not able to log in to my router..someone changed the password. My question is...is there a way to enable a maximum number of log-ins in order to prevent brute-force attacks? Interesting thing ..i had captcha enabled..how did they log in??