[cobalt-users] Raq 3 question, is this normal?

[Mantaray Motorsport Racing <terry@xxxxxxxxxx>]

Hello,
    I am running a raq 3 English, and in looking at my messages at the
root, I see this:

Jun 21 05:15:01 www proftpd[2697]: www.mmrusa.com (localhost[127.0.0.1])

- FTP session opened.
Jun 21 05:15:01 www proftpd[2697]: www.mmrusa.com (localhost[127.0.0.1])

- no such user 'anonymous'
Jun 21 05:15:01 www proftpd[2697]: www.mmrusa.com (localhost[127.0.0.1])

- no such user 'anonymous'
Jun 21 05:15:01 www proftpd[2697]: www.mmrusa.com (localhost[127.0.0.1])

- FTP session closed.
Jun 21 05:15:05 www telnetd[2720]: ttloop:  read: Broken pipe

Every 15 minutes the server does this.  Does anyone know why?  it
doesn't make any sense to me why the server would try to open an
anonymous ftp session.
Maybe I'm being over security conscious, but the server was hacked back
in Feb when the bind thing was going around.

Thanks, Terry
mmrusa.com
1-888-542-3626