Well first I would like to say hello to everyone here as I am new to RS and just got me a LWB last week. I read a lot of the messages here and got it all setup and everything is going good so far.

I do have one quick question. When I run "netstat" on my server I see normal http connections but just recently I also see a stange ftp connection coming from the IP ***.***.***.***.

The IP does not reverse DNS to anything and when I traceroute it, it goes through an ev1.net IP: ***.***.***.***. Is there any reason an ev1 server should have an ftp connection open to my server? I don't have anonymous ftp access on any domain on my server so I am little worried as to what this connection is. Any suggestions?

Well I was told by a nice RS employee in the irc chat that they use ftp to monitor servers so I edited out the IP in question.