Page 1 of 1

USER yyyyy: no such user found from 107.150.xxx.xx

Posted: 10 Nov 2018, 11:56
by marcelorp
Hello!

I'm getting this log spamming on my new server:

Code: Select all

USER yyyyy: no such user found from 107.150.xxx.xx 
My configuration of LF_ is:

Code: Select all

LF_TRIGGER = "5"
LF_TRIGGER_PERM = "3600"
LF_SSHD = "5"
LF_SSHD_PERM = "3600"
LF_FTPD = "1"
LF_FTPD_PERM = "3600"
LF_SMTPAUTH = "1"
LF_SMTPAUTH_PERM = "3600"
LF_EXIMSYNTAX = "1"
LF_EXIMSYNTAX_PERM = "3600"
LF_POP3D = "1"
LF_POP3D_PERM = "3600"
LF_IMAPD = "1"
LF_IMAPD_PERM = "3600"
LF_HTACCESS = "1"
LF_HTACCESS_PERM = "3600"
LF_MODSEC = "1"
LF_MODSEC_PERM = "3600"
LF_WEBMIN = "1"
LF_WEBMIN_PERM = "3600"
LF_INTERVAL = "3600"
LF_FLUSH = "3600"
I think that should be block the IP when reach 5 failed tries into 1 hour of interval, and perm block if get 3 temporary tries into 1 day of interval (other settings not included here). But its not...

Re: USER yyyyy: no such user found from 107.150.xxx.xx

Posted: 11 Nov 2018, 10:27
by marcelorp
I found the soluction...here is:

Default:

Code: Select all

FTPD_LOG = "/var/log/messages"
Changed to:

Code: Select all

FTPD_LOG = "/var/log/secure"