Here is the response when I tried variations of FTP:
Sep 15 13:20:34 ns2 sshd[19505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=*.*.*.* user=user.name
Sep 15 13:20:35 ns2 sshd[19505]: Failed password for user.name from *.*.*.* port 3907 ssh2
Sep 15 13:25:09 ns2 sshd[19904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=*.*.*.* user=user.name
Sep 15 13:25:11 ns2 sshd[19904]: Failed password for user.name from *.*.*.* port 1776 ssh2
Sep 15 13:29:14 ns2 sshd[20385]: Accepted password for user.name from *.*.*.* port 5108 ssh2
Sep 15 13:29:14 ns2 sshd[20385]: pam_unix(sshd:session): session opened for user user.name by (uid=0)
Sep 15 13:29:14 ns2 sshd[20385]: pam_unix(sshd:session): session closed for user user.name
Sep 15 13:29:19 ns2 sshd[20389]: Accepted password for user.name from *.*.*.* port 1916 ssh2
Sep 15 13:29:19 ns2 sshd[20389]: pam_unix(sshd:session): session opened for user user.name by (uid=0)
Sep 15 13:29:20 ns2 sshd[20389]: pam_unix(sshd:session): session closed for user user.name
Sep 15 14:24:30 ns2 sshd[25158]: Accepted password for user.name from *.*.*.* port 4275 ssh2
Sep 15 14:24:30 ns2 sshd[25158]: pam_unix(sshd:session): session opened for user user.name by (uid=0)
Sep 15 14:24:30 ns2 sshd[25158]: pam_unix(sshd:session): session closed for user user.name
Sep 15 14:24:35 ns2 sshd[25165]: Accepted password for user.name from *.*.*.* port 4504 ssh2
Sep 15 14:24:35 ns2 sshd[25165]: pam_unix(sshd:session): session opened for user user.name by (uid=0)
Sep 15 14:24:36 ns2 sshd[25165]: pam_unix(sshd:session): session closed for user user.name
Sep 15 14:27:18 ns2 sshd[25520]: Invalid user support from *.*.*.*
Sep 15 14:27:18 ns2 sshd[25521]: input_userauth_request: invalid user support
Sep 15 14:27:19 ns2 sshd[25520]: pam_succeed_if(sshd:auth): error retrieving information about user support
Sep 15 14:27:21 ns2 sshd[25520]: Failed password for invalid user support from *.*.*.* port 7120 ssh2
Sep 15 14:27:41 ns2 sshd[25522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=*.*.*.* user=user.name
Sep 15 14:27:43 ns2 sshd[25522]: Failed password for user.name from *.*.*.* port 1687 ssh2
Sep 15 14:28:13 ns2 sshd[25577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=*.*.*.* user=user.name
Sep 15 14:28:16 ns2 sshd[25577]: Failed password for user.name from *.*.*.* port 7038 ssh2
Sep 15 14:29:29 ns2 sshd[25644]: Accepted password for user.name from *.*.*.* port 7582 ssh2
Sep 15 14:29:29 ns2 sshd[25644]: pam_unix(sshd:session): session opened for user user.name by (uid=0)
Sep 15 14:29:30 ns2 sshd[25644]: pam_unix(sshd:session): session closed for user user.name
Sep 15 14:29:35 ns2 sshd[25648]: Accepted password for user.name from *.*.*.* port 2494 ssh2
Sep 15 14:29:35 ns2 sshd[25648]: pam_unix(sshd:session): session opened for user user.name by (uid=0)
Sep 15 14:29:35 ns2 sshd[25648]: pam_unix(sshd:session): session closed for user user.name
Sep 15 16:10:34 ns2 sshd[3701]: Accepted password for user.name from *.*.*.* port 5984 ssh2
Sep 15 16:10:34 ns2 sshd[3701]: pam_unix(sshd:session): session opened for user user.name by (uid=0)
Sep 15 16:10:34 ns2 sshd[3701]: pam_unix(sshd:session): session closed for user user.name
Sep 15 16:10:40 ns2 sshd[3741]: Accepted password for user.name from *.*.*.* port 1595 ssh2
Sep 15 16:10:40 ns2 sshd[3741]: pam_unix(sshd:session): session opened for user user.name by (uid=0)
Sep 15 16:10:40 ns2 sshd[3741]: pam_unix(sshd:session): session closed for user user.name
Sep 15 16:10:42 ns2 proftpd: pam_unix(proftpd:session): session opened for user user.name by (uid=0)
Sep 15 16:10:42 ns2 proftpd[3762]: 149.255.100.106 (::ffff:*.*.*.*[::ffff:*.*.*.*]) - USER user.name: Login successful.
Sep 15 16:11:30 ns2 proftpd: pam_unix(proftpd:session): session opened for user user.name by (uid=0)
Sep 15 16:11:30 ns2 proftpd[4080]: 149.255.100.106 (::ffff:*.*.*.*[::ffff:*.*.*.*]) - USER user.name: Login successful.
Although it shows successful, no files are listed!!
Most of the log entries I see above are for SSH, which show a variety of errors.
The only ones that aren’t errors are the last 4, which are for ProFTPd… and those actually appear to just be notification messages that it worked properly.
ProFTPd is showing that “user.domain” is logging in successfully.
When using an FTP client, and connecting to port 21 – what error is it that you are seeing in your client?