li318-216:~# grep vsftp /var/log/auth.log | tail
Feb 26 03:55:02 li318-216 vsftpd: pam_listfile(vsftpd:auth): Refused user root for service vsftpd
Feb 26 03:55:25 li318-216 vsftpd: pam_listfile(vsftpd:auth): Refused user andrew for service vsftpd
Feb 26 04:18:56 li318-216 vsftpd: pam_unix(vsftpd:auth): check pass; user unknown
Feb 26 04:18:56 li318-216 vsftpd: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=anonymous rhost=(my ip)
Feb 26 04:19:04 li318-216 vsftpd: pam_listfile(vsftpd:auth): Refused user andrew for service vsftpd
Feb 26 04:19:04 li318-216 vsftpd: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=andrew rhost=159.63.186.72  user=andrew
Feb 26 04:19:13 li318-216 vsftpd: pam_listfile(vsftpd:auth): Refused user andrew for service vsftpd
Feb 26 06:17:17 li318-216 sudo:     root : TTY=pts/0 ; PWD=/etc ; USER=root ; COMMAND=/usr/sbin/service vsftpd restart
Feb 26 06:18:01 li318-216 vsftpd: pam_unix(vsftpd:auth): check pass; user unknown
Feb 26 06:18:01 li318-216 vsftpd: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=anonymous rhost=159.63.186.72
li318-216:~#