FTP server opening connections with itself?

2025-03-29

This is truely weird. Check out the following:

Nov 22 04:14:28 localhost proftpd[15010]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 04:22:48 localhost proftpd[15043]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 04:31:08 localhost proftpd[15072]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 04:39:29 localhost proftpd[15098]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 04:47:49 localhost proftpd[15126]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 04:56:09 localhost proftpd[15166]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 05:04:29 localhost proftpd[15218]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 05:12:49 localhost proftpd[15245]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 05:21:09 localhost proftpd[15280]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 05:29:29 localhost proftpd[15305]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 05:37:49 localhost proftpd[15332]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 05:46:09 localhost proftpd[15362]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 05:54:29 localhost proftpd[15400]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 06:02:50 localhost proftpd[15454]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 06:11:10 localhost proftpd[15483]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 06:19:30 localhost proftpd[15514]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 06:27:50 localhost proftpd[15542]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 06:36:10 localhost proftpd[15571]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 06:44:30 localhost proftpd[15596]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 06:52:50 localhost proftpd[15624]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 07:01:10 localhost proftpd[15681]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 07:09:30 localhost proftpd[15716]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 07:17:51 localhost proftpd[15748]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 07:26:11 localhost proftpd[15779]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 07:34:31 localhost proftpd[15804]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 07:42:51 localhost proftpd[15831]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 07:51:11 localhost proftpd[15861]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.
Nov 22 07:59:31 localhost proftpd[15909]: gandolf.rootpulse.com (gandolf.rootpulse.com[127.0.0.1]) - FTP session opened.

Is the FTP server opening connections with itself? Yes, this is a CPanel based server.

Anyone know what's up?