/var/log/messages contains:-
Code:
Apr 21 22:15:26 test pure-ftpd: (?@localhost.localdomain) [INFO] New connection from localhost.localdomain
Apr 21 22:16:19 test pure-ftpd: (?@localhost.localdomain) [INFO] PAM_RHOST enabled. Getting the peer address
Apr 21 22:16:21 test pure-ftpd: (?@localhost.localdomain) [WARNING] Authentication failed for user [steve-ftp]
there is no /var/log/security or /var/log/pure-ftpd
I don't seem to have any ftp logs at all.