I can't really get a fix on which connection it is. The warn log doesn't indicate an account at all (just what I posted, nothing more) and the debug log doesn't show anything that matches the warn log. Going by timestamp also didn't help... :/
Is there any specific thing I could look for in the debug log to find the user in question?