Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 8 Jun 2005 00:29:57 -0400 (EDT)
From:      "kalin mintchev" <kalin@el.net>
To:        "Tony Shadwick" <tshadwick@goinet.com>
Cc:        Bob Bomar <bob@ibsd.us>, questions@freebsd.org
Subject:   Re: ircd
Message-ID:  <59298.68.165.89.73.1118204997.squirrel@68.165.89.73>
In-Reply-To: <20050607222655.B23064@mail.goinet.com>
References:  <59030.68.165.89.73.1118200333.squirrel@68.165.89.73> <42A66509.4070709@ibsd.us> <20050607222655.B23064@mail.goinet.com>

next in thread | previous in thread | raw e-mail | index | archive | help

i did run chkrootkit before writing this... nothing. and nothing on nmap
about those ports!?!.... thanks...

# chkrootkit -V
chkrootkit version 0.44



> I concur.  You might also want to run chkrootkit (security/chkrootkit) to
> see if you've been "0wned" so to speak.
>
> On Tue, 7 Jun 2005, Bob Bomar wrote:
>
>> kalin mintchev wrote:
>> |
>> | hi all...
>> |
>> | i found this 2 lines in the netstat output on one of my machines. we
>> are
>> | not running ircd and according to nmap ports 3483 and 2143 are
>> closed...
>> |
>> | can somebody please explain??   thanks.....
>> |
>> | tcp4       0      0  server.3484              zagreb.hr.eu.und.ircd
>> | ESTABLISHED
>> | tcp4       0      0  server.2143              free.tyranz.com.ircd
>> | ESTABLISHED
>>
>> Are you running any kind of irc client?  The output means:
>>
>> There are 2 connections, one on port 3484, and another on 2143
>> connected to zagreb.hr.eu.und and free.tyranz.com on the port
>> for ircd, port 6667.
>>
>> Some trojens use irc channels for control, might look into that.
>>
>> --
>> Bob Bomar
>> bob@bomar.us
>> http://www.bomar.us/~bob
>> _______________________________________________
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to
>> "freebsd-questions-unsubscribe@freebsd.org"
>> ------------ Output from gpg ------------
>> gpg: Signature made Tue Jun  7 22:24:55 2005 CDT using DSA key ID
>> 3AED74AA
>> gpg: Can't check signature: public key not found
>>
>>
>


-- 
--
"In a world without walls or fences, who needs Windows and Gates?"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?59298.68.165.89.73.1118204997.squirrel>