RE: [cobalt-users] Is this trojan?

[Arthur Sherman <arturs@xxxxxxxxxxxxxxxx>]

And this?

Feb  9 17:41:37 www sendmail[7030]: i19FfUM07030:
from=<66666666@xxxxxxxxxxxx>, size=0, class=0, nrcpts=0, proto=SMTP,
daemon=MTA, relay=[218.148.152.64]

Arthur Sherman
 

> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx 
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Brian Rahill
> Sent: Monday, February 09, 2004 17:58
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: Re: [cobalt-users] Is this trojan?
> 
> At 10:47 AM 2/9/2004, you wrote:
> >Feb  9 17:45:02 www imapd[7170]: Logout user=??? host=localhost 
> >[127.0.0.1] Feb  9 17:45:03 www sendmail[7172]: NOQUEUE: localhost 
> >[127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during 
> connection to MTA
> >
> >Is this trojan? Or what?
> 
> I believe this is active monitor checking to see if your 
> services are running.
> You will probably see this every 15 minutes with regularity. 
> If so, it's almost definitely active monitor.
> 
> Brian
> 
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>