Learn about Centmin Mod LEMP Stack today
Register Now

FTP Login Issue with Vaultpress

Discussion in 'System Administration' started by savitzer, Jan 23, 2021.

  1. savitzer

    savitzer New Member

    13
    1
    3
    Nov 23, 2018
    Ratings:
    +1
    Local Time:
    12:41 AM
    Hi,

    I have been trying to set up auto backups with Vaultpress but having issues connecting with FTP. I have tried resetting the password, disabling Pure-FTPD, changing TLS/SSL Encrypted Mode but it's still not working.


    Everytime I submit the details, Vaultpress's IPs gets blocked by CSF:

    Code:
    192.0.102.95 (US/United States/transport4.dca.vaultpress.com), 3 distributed ftpd attacks on account [username] in the last 3600 secs - *Blocked in csf* [LF_DISTATTACK]
    Any suggestions on how to get through this?

    Thanks!
     
  2. eva2000

    eva2000 Administrator Staff Member

    50,891
    11,791
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,246
    Local Time:
    5:11 AM
    Nginx 1.25.x
    MariaDB 10.x
  3. savitzer

    savitzer New Member

    13
    1
    3
    Nov 23, 2018
    Ratings:
    +1
    Local Time:
    12:41 AM
    No way to control number of FTP connections. Tried whitelisting the IP but still not working:

    Code:
    Jan 23 14:20:01 CentOS-78-64-minimal lfd[21831]: *Error*: csf output: deny failed: 192.0.102.95 is in the allow file /etc/csf/csf.allow
    
    Jan 23 14:20:01 CentOS-78-64-minimal lfd[21831]: (ftpd) Failed FTP login from 192.0.102.95 (US/United States/transport4.dca.vaultpress.com): 3 in the last 3600 secs - *Blocked in csf* [LF_FTPD]
    Jan 23 14:20:21 CentOS-78-64-minimal lfd[21872]: *Error*: csf output: deny failed: 192.0.102.95 is in the allow file /etc/csf/csf.allow
    
    Jan 23 14:20:21 CentOS-78-64-minimal lfd[21872]: (ftpd) Failed FTP login from 192.0.102.95 (US/United States/transport4.dca.vaultpress.com): 3 in the last 3600 secs - *Blocked in csf* [LF_FTPD]
    
    Any suggestions?
     
  4. eva2000

    eva2000 Administrator Staff Member

    50,891
    11,791
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,246
    Local Time:
    5:11 AM
    Nginx 1.25.x
    MariaDB 10.x
    trigger by lfd so from CSF Firewall - CentminMod.com LEMP Nginx web stack for CentOS

    then restart CSF Firewall
    Code (Text):
    csf -ra
     
  5. eva2000

    eva2000 Administrator Staff Member

    50,891
    11,791
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,246
    Local Time:
    5:11 AM
    Nginx 1.25.x
    MariaDB 10.x
    why are you denying the IP with -d, you should be allowing it with -a
     
  6. savitzer

    savitzer New Member

    13
    1
    3
    Nov 23, 2018
    Ratings:
    +1
    Local Time:
    12:41 AM
    Ok ignoring the whole range of their IPs worked. Thanks for the help!
     
  7. eva2000

    eva2000 Administrator Staff Member

    50,891
    11,791
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,246
    Local Time:
    5:11 AM
    Nginx 1.25.x
    MariaDB 10.x
    Glad to hear :D