^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ proftpd\[[[:digit:]]+\]: connect from [.:[:xdigit:]]+ \([.:[:xdigit:]]+\)$