USER yyyyy: no such user found from 107.150.xxx.xx

[marcelorp]

Hello!

I'm getting this log spamming on my new server:

Code: Select all

USER yyyyy: no such user found from 107.150.xxx.xx 

My configuration of LF_ is:

Code: Select all

LF_TRIGGER = "5"
LF_TRIGGER_PERM = "3600"
LF_SSHD = "5"
LF_SSHD_PERM = "3600"
LF_FTPD = "1"
LF_FTPD_PERM = "3600"
LF_SMTPAUTH = "1"
LF_SMTPAUTH_PERM = "3600"
LF_EXIMSYNTAX = "1"
LF_EXIMSYNTAX_PERM = "3600"
LF_POP3D = "1"
LF_POP3D_PERM = "3600"
LF_IMAPD = "1"
LF_IMAPD_PERM = "3600"
LF_HTACCESS = "1"
LF_HTACCESS_PERM = "3600"
LF_MODSEC = "1"
LF_MODSEC_PERM = "3600"
LF_WEBMIN = "1"
LF_WEBMIN_PERM = "3600"
LF_INTERVAL = "3600"
LF_FLUSH = "3600"

I think that should be block the IP when reach 5 failed tries into 1 hour of interval, and perm block if get 3 temporary tries into 1 day of interval (other settings not included here). But its not...

[marcelorp]

I found the soluction...here is:

Default:

Code: Select all

FTPD_LOG = "/var/log/messages"

Changed to:

Code: Select all

FTPD_LOG = "/var/log/secure"