Questions tagged [netstat]

Netstat is a command line tool that shows network related information like listening sockets, routing rules, open connections and also various statistics.

Filter by
Sorted by
Tagged with
-1
votes
1answer
53 views

Tor relay on port 9001 TCP

I executed netstat -t on my linux terminal and noticied a tor relay running on port 9001. I've search about the IP address of relay on shodan and got a result that address is from Russia, after that i ...
0
votes
1answer
40 views

Connection changes after waking from sleep

On Debian, Linux, I am using netstat to monitor connections. After waking my system from sleep, I noticed a change in one of the connections, using port 6667 for irssi (identified by PID). I like to ...
0
votes
1answer
101 views

Understanding, Interpreting and Taking Action on Established Connections [closed]

Background: I have what I believe is a serious malware problem but virtually all scanning tools won't detect anything or if they do rarely do so consistently. I believe the malware (in some way/...
3
votes
2answers
345 views

odd ip address connected to my box

Today i went to the library. I was looking at my netstat -an output and i saw this. tcp 0 0 127.0.0.1:6379 127.0.0.1:46376 ESTABLISHED tcp 0 0 127.0.0.1:46376 ...
4
votes
2answers
404 views

Shouldn't netstat show connections from many different IP addresses during a DDoS, unlike this example?

I just read this article from loggly (https://www.loggly.com/blog/how-to-detect-and-analyze-ddos-attacks-using-log-analysis/), and it got me wondering. The author states that under a DDoS attack, ...
0
votes
1answer
277 views

Suspicious SSH connection

this is the situation: vps with debian 8x32 virgin (new template of the provider's repository); exotic "user" and strong "password" ; 30 seconds later: command (apt-get update); 30 seconds later: ...
23
votes
5answers
11k views

Find IM user location via netstat?

I got sent an article today (http://hakerin.com/facebook-user-location-finder-noobs/). With the click-bait title "Facebook User location Finder" Of course I clicked it. Going through the "article" ...
1
vote
1answer
777 views

Is it suspicious that netstat shows many established connections related with 5KPlayer?

I am working on an ASP.NET application and, as usually, tried to deploy it on IIS Express from Visual Studio. This time, IIS error occured. The error was caused by the application port being occupied ...
1
vote
1answer
773 views

Weird Procceses [closed]

Can someone tell me if netstat -a -n -o is throwing something out of normal? I Have nothing running except for the Windows Explorer in 4584 TCP 0.0.0.0:135 0.0.0.0:0 ...
0
votes
1answer
821 views

How to track if someone is remotely watching your network [closed]

How can i check that I am being remotely watched? This is the netstat results of my current network. Is someone able to check if someone is remotely stalking me? Are there any suggestions on how I ...
5
votes
1answer
1k views

I ran netstat and one thing that came up was MSN bingbot, does that mean my computer is being used as part of a Microsoft botnet?

I ran netstat on my computer, and one thing that came up was msnbot-65-52-108-216. I did some research and what came up was that it's from an IP originating in Redmond, Washington and that it's likely ...
0
votes
1answer
372 views

Command prompt netsat malware detection [closed]

I suspect I have malware in my laptop. Can someone explain what is happening in that log? I'm using public WiFi.
1
vote
1answer
2k views

Why is my Windows 10 machine listening for 127.127.127.127:3939?

I was hoping someone out there could answer why my Windows 10 Machine would be listening on port 3939 using 127.127.127.127 over TCP? I get the below with netstat -nat: TCP 127.127.127.127:3939 ...
2
votes
1answer
313 views

SYN Flood from fixed spoof IP but receive only one packet

I'm generating a network flood with a lot of packets coming from one fixed IP+port pair (in this example, 1.2.3.4:2003). Why do I only see one SYN_RECV'd packet in netstat on the victim machine?
2
votes
2answers
2k views

UDP sockets open on all ports

I'm on osx. netstat -an -f inet gives me a bunch (around 10) of entries like these: ... udp4 0 0 *.* *.* udp46 0 0 *.* *.* ... In my ...
0
votes
1answer
464 views

Organizing results from netstat using find on Windows [closed]

I am trying to figure out a way to natively do this within Windows without having to load any 3rd party applications. When I run: netstat -ba I want to find established connections without losing ...