Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ROOT PRIVS at ../../../src/main.c:1011
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - SETUP PRIVS at ../../../src/main.c:1016
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - FTP session requested from unknown class
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - performing module session initializations
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - mod_delay/0.4: opening DelayTable '/var/run/proftpd/proftpd.delay'
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ROOT PRIVS at ../../../modules/mod_delay.c:910
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - FS: using system open()
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - RELINQUISH PRIVS at ../../../modules/mod_delay.c:912
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ExtendedLog '/var/log/paranoid.log' uses unknown format nickname 'default'
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ROOT PRIVS at ../../../modules/mod_auth.c:132
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - RELINQUISH PRIVS at ../../../modules/mod_auth.c:134
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - AuthOrder in effect, resetting auth module order
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - performing ident lookup
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ident connection failed: Connection refused
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ident lookup returned 'UNKNOWN'
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - connected - local : 65.111.222.8:21
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - connected - remote : 172.16.0.7:2457
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - FTP session opened.
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_rewrite
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_tls
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_core
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_core
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_delay
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_auth
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endpwent" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endgrent" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching CMD command 'USER cs1' to mod_ratio
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching CMD command 'USER cs1' to mod_auth
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "getgroups" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - no supplemental groups found for user 'cs1'
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching POST_CMD command 'USER cs1' to mod_delay
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - mod_delay/0.4: selecting median interval from 9 values
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching LOG_CMD command 'USER cs1' to mod_log
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_rewrite
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_tls
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_core
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_core
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_delay
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_wrap
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_radius
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_auth
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endpwent" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endgrent" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching CMD command 'PASS (hidden)' to mod_auth
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "getgroups" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - no supplemental groups found for user 'cs1'
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "getpwnam" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - no such user 'cs1'
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - mod_delay/0.4: selecting median interval from 14 values
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endpwent" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endgrent" to module mod_auth_file
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - FTP session closed.