Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ROOT PRIVS at ../../../src/main.c:1011 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - SETUP PRIVS at ../../../src/main.c:1016 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - FTP session requested from unknown class 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - performing module session initializations 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - mod_delay/0.4: opening DelayTable '/var/run/proftpd/proftpd.delay' 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ROOT PRIVS at ../../../modules/mod_delay.c:910 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - FS: using system open() 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - RELINQUISH PRIVS at ../../../modules/mod_delay.c:912 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ExtendedLog '/var/log/paranoid.log' uses unknown format nickname 'default' 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ROOT PRIVS at ../../../modules/mod_auth.c:132 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - opening scoreboard '/var/run/proftpd/proftpd.scoreboard' 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - RELINQUISH PRIVS at ../../../modules/mod_auth.c:134 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - AuthOrder in effect, resetting auth module order 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - performing ident lookup 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ident connection failed: Connection refused 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - ident lookup returned 'UNKNOWN' 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - connected - local  : 65.111.222.8:21 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - connected - remote : 172.16.0.7:2457 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - FTP session opened. 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_rewrite 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_tls 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_core 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_core 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_delay 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'USER cs1' to mod_auth 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endpwent" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endgrent" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching CMD command 'USER cs1' to mod_ratio 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching CMD command 'USER cs1' to mod_auth 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "getgroups" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - no supplemental groups found for user 'cs1' 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching POST_CMD command 'USER cs1' to mod_delay 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - mod_delay/0.4: selecting median interval from 9 values 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching LOG_CMD command 'USER cs1' to mod_log 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_rewrite 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_tls 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_core 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_core 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_delay 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_wrap 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_radius 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_auth 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endpwent" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endgrent" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching CMD command 'PASS (hidden)' to mod_auth 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "getgroups" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - no supplemental groups found for user 'cs1' 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "getpwnam" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - no such user 'cs1' 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - mod_delay/0.4: selecting median interval from 14 values 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endpwent" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - dispatching auth request "endgrent" to module mod_auth_file 
Oct 12 14:55:52 harry proftpd[26945]: harry (172.16.0.7[172.16.0.7]) - FTP session closed.