New user's registration have been closed due to high spamming and low trafic on this forum. Please contact forum admins directly if you need an account. Thanks !

error mess?

Got problems with your B2 or B3? Share and get helped!
Post Reply
winzhangout
Posts: 58
Joined: 29 Mar 2009, 17:12

error mess?

Post by winzhangout »

Jan 26 18:59:11 bubba proftpd[27396]: bubba.localdomain (::ffff:121.14.152.87[::ffff:121.14.152.87]) - FTP session opened.
Jan 26 18:59:12 bubba proftpd[27396]: bubba.localdomain (::ffff:121.14.152.87[::ffff:121.14.152.87]) - no such user 'test'
Jan 26 18:59:14 bubba proftpd[27397]: bubba.localdomain (::ffff:121.14.152.87[::ffff:121.14.152.87]) - error


atleast 12 hours i have that thing in my log what does it means?? keeps every 10sec. Is there any problem?
RandomUsername
Posts: 904
Joined: 09 Oct 2009, 18:49

Re: error mess?

Post by RandomUsername »

Looks like someone's trying to log in to the server. Do you have ftp open to the WAN?
mcg
Posts: 36
Joined: 13 Nov 2009, 22:34

Re: error mess?

Post by mcg »

Yep, someone's doing a brute force attack on your server. Google "iptables brute force attack" for potential solutions. Most of them talk about SSH but they apply to FTP as well.

But the easiest solution is not to turn off the FTP server completely or to configure your Bubba not to allow FTP access from the outside.
mcg
Posts: 36
Joined: 13 Nov 2009, 22:34

Re: error mess?

Post by mcg »

Also look here

http://forum.excito.net/viewtopic.php?f=10&t=2086

If you change everything from SSH to FTP suggested there, it should help.
Post Reply