Oct 5 03:10:13 ubuntu proftpd: CzP comment: anon ftp Oct 5 03:10:24 ubuntu proftpd[6818]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session opened. Oct 5 10:10:28 ubuntu proftpd[6818]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - Preparing to chroot to directory '/home/ftp' Oct 5 10:10:28 ubuntu proftpd[6818]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - ANON ftp: Login successful. Oct 5 10:10:29 ubuntu proftpd[6818]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session closed. Oct 5 03:10:43 ubuntu proftpd: CzP comment: root Oct 5 03:10:46 ubuntu proftpd[6820]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session opened. Oct 5 03:10:49 ubuntu proftpd[6820]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - SECURITY VIOLATION: root login attempted. Oct 5 03:10:54 ubuntu proftpd[6820]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session closed. Oct 5 03:11:11 ubuntu proftpd: CzP comment: invalid username Oct 5 03:11:13 ubuntu proftpd[6836]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session opened. Oct 5 03:11:17 ubuntu proftpd[6836]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - USER asdf: no such user found from ::ffff:192.168.2.179 [::ffff:192.168.2.179] to ::ffff:192.168.2.159:21 Oct 5 03:11:22 ubuntu proftpd[6836]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session closed. Oct 5 03:11:37 ubuntu proftpd: CzP comment: invalid password Oct 5 03:11:40 ubuntu proftpd[6846]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session opened. Oct 5 03:11:41 ubuntu proftpd: pam_unix(proftpd:auth): authentication failure; logname= uid=0 euid=0 tty=/dev/ftpd6846 ruser=czanik rhost=::ffff:192.168.2.179 user=czanik Oct 5 03:11:44 ubuntu proftpd[6846]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - USER czanik (Login failed): Incorrect password. Oct 5 03:11:45 ubuntu proftpd[6846]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session closed. Oct 5 03:11:54 ubuntu proftpd: CzP comment: valid password Oct 5 03:11:58 ubuntu proftpd[6848]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session opened. Oct 5 03:12:00 ubuntu proftpd: pam_unix(proftpd:session): session opened for user czanik by (uid=0) Oct 5 03:12:00 ubuntu proftpd[6848]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - USER czanik: Login successful. Oct 5 03:12:03 ubuntu proftpd: pam_unix(proftpd:session): session closed for user czanik Oct 5 03:12:03 ubuntu proftpd[6848]: ubuntu (::ffff:192.168.2.179[::ffff:192.168.2.179]) - FTP session closed.