At 10:47 AM 2/9/2004, you wrote:
Feb 9 17:45:02 www imapd[7170]: Logout user=??? host=localhost [127.0.0.1] Feb 9 17:45:03 www sendmail[7172]: NOQUEUE: localhost [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Is this trojan? Or what?
I believe this is active monitor checking to see if your services are running.You will probably see this every 15 minutes with regularity. If so, it's almost definitely active monitor.
Brian