Date: Mon, 01 Jun 1998 18:04:19 +0400 From: Alexander Kandelaki <kai@sanet.ge> To: freebsd-security@FreeBSD.ORG Subject: Possible Atack !!! Message-ID: <3572B4E3.704@sanet.ge>
next in thread | raw e-mail | index | archive | help
Hello !
I have strange situation on my system FreeBSD-2.2.5,.
I runn command netstat and get :
I think it's very strange parametrs . Why it happens ??
Sincerely yours,
Alexander Kandelaki
====================================================================
Alexander I. Kandelaki Sa*Net Network,
System Administrator 37 Rustaveli ave.,
Tbilisi,380008, Georgia
Phones : +995 32 987414, 922949 WWW : http://www.sanet.ge
987470, 922989 E-Mail: kai@sanet.ge
Fax: : +995 32 001367 ICQ : 2851311
tcp 0 0 access.smtp tdv4.star.net.uk.18516
TIME_WAIT
tcp 0 0 access.pop3 ppp36-tc1.1026
TIME_WAIT
tcp 0 0 access.3120 208.239.36.131.smtp
TIME_WAIT
tcp 0 0 access.3118 209.117.182.2.smtp
TIME_WAIT
tcp 70 -265816412 0.239.8.241.glogger 144.70.8.241.6215
CLOSED
tcp 1078 -265861860 128.248.7.241.glogger 16.203.254.240.4328
-26584912
8
tcp 259 -266060032 128.45.8.241.glogger 16.129.7.241.37032
CLOSED
tcp 405 -266141856 128.222.241.240.glogge 144.96.8.241.6215
-26586946
0
tcp 4 -266140584 access.pop3 144.122.7.241.1027
-26585880
0
tcp 25 -265882920 access.3131 16.95.231.240.25
-26577409
2
tcp 4289 -266149744 access.3134 16.89.254.240.25
CLOSED
tcp 0 -266058732 access.pop3 16.91.255.240.2050
CLOSED*
tcp 29 -266199928 access.3050 16.224.7.241.25
CLOSED
udp 0 0 localhost.domain *.*
udp 0 0 access.domain *.*
Active UNIX domain sockets
Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr
f0ede000 dgram 0 0 0 f0a04c14 0 f0a04794
f0ede700 dgram 0 0 0 f0a04c14 0 f0a04814
f108d300 dgram 0 0 0 f0a04c14 0 f0a04594
f0ea2b00 dgram 0 0 0 f0a04c14 0 f0a04a
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3572B4E3.704>