Strange foreign connections
Ruben de Groot
mail25 at bzerk.org
Thu Feb 3 06:41:09 PST 2005
On Wed, Feb 02, 2005 at 11:01:42AM -0600, Gene typed:
> While running netstat I found these entries:
> Active Internet connections (including servers)
> Proto Recv-Q Send-Q Local Address Foreign Address (state)
> tcp4 0 0 localhost.52730 undernet1.blueyo.ircd
> tcp4 0 0 localhost.52398 minotor.spale.co.ircd
> tcp4 0 0 localhost.60635 bagan2.srce.hr.ircd
> The foreign addresses all show ircd at the end, but there is no irc
> clients or servers running and irc ports are blocked at the firewall.
> Does anyone have any idea what might be going on here?
I would assume your system is compromised, unless proven otherwise.
More information about the freebsd-questions