Date: Tue, 7 Jun 2005 22:27:43 -0500 (CDT) From: Tony Shadwick <tshadwick@goinet.com> To: Bob Bomar <bob@ibsd.us> Cc: kalin mintchev <kalin@el.net>, questions@freebsd.org Subject: Re: ircd Message-ID: <20050607222655.B23064@mail.goinet.com> In-Reply-To: <42A66509.4070709@ibsd.us> References: <59030.68.165.89.73.1118200333.squirrel@68.165.89.73> <42A66509.4070709@ibsd.us>
next in thread | previous in thread | raw e-mail | index | archive | help
I concur. You might also want to run chkrootkit (security/chkrootkit) to see if you've been "0wned" so to speak. On Tue, 7 Jun 2005, Bob Bomar wrote: > kalin mintchev wrote: > | > | hi all... > | > | i found this 2 lines in the netstat output on one of my machines. we are > | not running ircd and according to nmap ports 3483 and 2143 are closed... > | > | can somebody please explain?? thanks..... > | > | tcp4 0 0 server.3484 zagreb.hr.eu.und.ircd > | ESTABLISHED > | tcp4 0 0 server.2143 free.tyranz.com.ircd > | ESTABLISHED > > Are you running any kind of irc client? The output means: > > There are 2 connections, one on port 3484, and another on 2143 > connected to zagreb.hr.eu.und and free.tyranz.com on the port > for ircd, port 6667. > > Some trojens use irc channels for control, might look into that. > > -- > Bob Bomar > bob@bomar.us > http://www.bomar.us/~bob > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > ------------ Output from gpg ------------ > gpg: Signature made Tue Jun 7 22:24:55 2005 CDT using DSA key ID 3AED74AA > gpg: Can't check signature: public key not found > >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050607222655.B23064>