forum.excito.org

Jan 26 18:59:11 bubba proftpd[27396]: bubba.localdomain (::ffff:121.14.152.87[::ffff:121.14.152.87]) - FTP session opened.
Jan 26 18:59:12 bubba proftpd[27396]: bubba.localdomain (::ffff:121.14.152.87[::ffff:121.14.152.87]) - no such user 'test'
Jan 26 18:59:14 bubba proftpd[27397]: bubba.localdomain (::ffff:121.14.152.87[::ffff:121.14.152.87]) - error


atleast 12 hours i have that thing in my log what does it means?? keeps every 10sec. Is there any problem?

Looks like someone's trying to log in to the server. Do you have ftp open to the WAN?

Yep, someone's doing a brute force attack on your server. Google "iptables brute force attack" for potential solutions. Most of them talk about SSH but they apply to FTP as well.

But the easiest solution is not to turn off the FTP server completely or to configure your Bubba not to allow FTP access from the outside.

Also look here

http://forum.excito.net/viewtopic.php?f=10&t=2086

If you change everything from SSH to FTP suggested there, it should help.