TCLUG Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Am I being hacked now? (netstat stuff)
I just ran netstat (for the first time) and I see this connection to
ppp-asfm-balh.sirius.net via nterm. What is this and what does it mean. I
see no mention of this ip address in any logs, nor any icq people from
this ip. I ran nmap and it says no port are open and so I can't find out
who this is. What does this mean
[lueyb@pclueyb lueyb]$ netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 1 pclueyb:1575 ppp-asfm04--199.sir:www
SYN_SENT
tcp 87 0 pclueyb:nterm ppp-asfm05--027.si:1083
ESTABLISHED
tcp 0 0 localhost:7100 localhost:3444 CLOSE
tcp 0 0 localhost:7100 localhost:3443 CLOSE
tcp 0 0 pclueyb:nterm ppp-asfm04--199.si:1076
ESTABLISHED
tcp 0 0 localhost:7100 localhost:listen
ESTABLISHED
tcp 0 0 localhost:listen localhost:7100
ESTABLISHED
udp 0 0 pclueyb:1073 icq.icq.com:4000
ESTABLISHED
Ben Luey
lueyb@carleton.edu
ICQ: 19144397
I didn't realize that jobs and trade and what makes America work would become
a big issue. -- Bob Dole