Hi,
I recently started running a network packet logger called iptraf
when ever I am browsing the Net on my linux desktop. I have installed
Ubuntu as the OS. After a short duration, I get the following IP
addresses (this is just an example) even though there is no network
activity from my side.
67.60.32.249:2540 = 1
48 S--- eth0 └xxx.246.88.202:9000
Where 202.88.246.xxx is my address and the above IP address has
initiated the connection to my machine as is shown by the 'S' .
9000 could be the X server port. I have run nmap on my machine and all
the TCP ports are closed. And all the UDP ports except bootpc are also
seen to be closed.
What could be the reason for this. And how can I block such activity
on my machine. Assuming it is a security loophole, I would like to
know if it is possible for someone to root my machine or say install
and run a keylogger.
kind regards
Ravi
N╛HS^╣И ┼X╛╡
'╡┼чu╪╠<бз┌╨.²жКy╘"· ╝*m┼x%jx.j╜┘╚^фв╖vф╘╕X°jь╗·х╖╤▄ m╘щ ├Б∙И·v&─╤в╖vь^√+чаФэjкZ²ьХ┼{az Б≥Г^╫Иh╔ЙЮ╝▀╘n╥ ▓)Ю┼{h╤╛²Л ║ь╖┌в╚╝+h╞(m╤÷Ъ╠ИZ╡К jY┌w╜Чг╔rg
