Results 1 to 4 of 4

Thread: Suspect port (at least to me)

  1. #1
    Join Date
    May 2009
    Location
    USA
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Suspect port (at least to me)

    Hello all,

    From time to time, I do a netstat run to check for suspicious connections. Yesterday, found this
    Code:
    localhost:44952 -> localhost:44952 == ESTABLISHED
    .
    Looked up the port number, didn't find helpful info, except it's TCP/UDP.

    Does anyone have any info to share about this matter?

    Thank you.
    Last edited by youngunix; October 3rd, 2012 at 08:00 PM.

  2. #2
    Join Date
    Dec 2011
    Location
    Manchester, UK
    Beans
    356
    Distro
    Ubuntu

    Re: Suspect port (at least to me)

    Quote Originally Posted by youngunix View Post
    Hello all,

    From time to time, I do a netstat run to check for suspicious connections. Yesterday, found this
    Code:
    localhost:44952 -> localhost:44952 == ESTABLISHED
    .
    Looked up the port number, didn't find helpful info, except it's TCP/UDP.

    Does anyone have any info to share about this matter?

    Thank you.
    It looks like the computer connected with itself. There are some reasons why it may do this, but I doubt it would be anything malicious, since malicious programs have to connect to EXTERNAL addresses to do harm- connecting to yourself isn't putting yourself in any danger.
    Read my technology blog at: http://penguincampaigner.wordpress.com

  3. #3
    Join Date
    Oct 2008
    Location
    /var/log/uk :-)
    Beans
    211
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Suspect port (at least to me)

    run sudo netstat -lnp, anything interesting/suspect showing?

  4. #4
    Join Date
    May 2009
    Location
    USA
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Suspect port (at least to me)

    Quote Originally Posted by mr-woof View Post
    run sudo netstat -lnp, anything interesting/suspect showing?
    No, just the usual (ssh, avahi, cups,...) my guess is that it just looked outta place.

    Thanks guys

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •