Thread: Outgoing connections to TCP 666x
i checking firewall logs , noticed large number of connection attempts ubuntu box (8.04) seemingly random internet hosts.
src ports high order ports , connections trying establish ports
6661
6665
6667
7000
happening approximately once every 60 seconds. have run netstat -a , don't see running on tcp trying connect ports.
other tools can use attempt locate process trying connect ports?
looks irc traffic. on irc networks? on ubuntu server chance?
try using wireshark dump traffic , find 1 packet in connection sequence. once have packet, right click , choose option, "follow tcp stream." there, should have idea of network activity trying do.
Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] Outgoing connections to TCP 666x
Ubuntu
Comments
Post a Comment