TCLUG Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Am I being hacked now? (netstat stuff)



I just ran netstat (for the first time) and I see this connection to
ppp-asfm-balh.sirius.net via nterm. What is this and what does it mean. I
see no mention of this ip address in any logs, nor any icq people from
this ip. I ran nmap and it says no port are open and so I can't find out
who this is. What does this mean

[lueyb@pclueyb lueyb]$ netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      1 pclueyb:1575            ppp-asfm04--199.sir:www
SYN_SENT
tcp       87      0 pclueyb:nterm           ppp-asfm05--027.si:1083
ESTABLISHED
tcp        0      0 localhost:7100          localhost:3444          CLOSE
tcp        0      0 localhost:7100          localhost:3443          CLOSE
tcp        0      0 pclueyb:nterm           ppp-asfm04--199.si:1076
ESTABLISHED
tcp        0      0 localhost:7100          localhost:listen
ESTABLISHED
tcp        0      0 localhost:listen        localhost:7100
ESTABLISHED
udp        0      0 pclueyb:1073            icq.icq.com:4000
ESTABLISHED         



Ben Luey
lueyb@carleton.edu
ICQ: 19144397

I didn't realize that jobs and trade and what makes America work would become
a big issue.  --  Bob Dole