Secure Log Question
I have a VPS with WHM/cPanel running Fedora - everything is up to date.
In reviewing my logs, I always see a bunch of the following entries in my /var/log/secure file:
Sep 17 11:09:36 server xinetd[731]: START: imap pid=32525 from=127.0.0.1
Sep 17 11:09:37 server xinetd[731]: START: imap pid=32537 from=127.0.0.1
Sep 17 11:18:00 server xinetd[731]: START: imap pid=32645 from=127.0.0.1
Sep 17 11:18:03 server xinetd[731]: START: imap pid=32660 from=127.0.0.1
(FYI: the ip address is actualy 127.0.0.1 i did not change that)
These happen about every 10 mins, though sometimes more and sometimes less- they are pretty random. This has been happening since I started the server about 15 days ago.
What is this and is it normal, or does it mean something fishy is going on?
Thanks a lot-
_roscolux
