Re: Compromised-machine?? netbus- request from my debian-sid machine to outside IP to port 12345

[tripolar]

Paul Johnson wrote:
tripolar <[EMAIL PROTECTED]> writes:
 

I see hits from my debian machine to 81.53.*.* port 12345 - under
service it says "netbus"
I dont think I installed netbus. Could my machine be compromised?
   

I doubt it.  Are you using PortSentry or some other port monitoring
system?
 

I dont think so- The only thing I know of is firestarter (firewall). I 
received some more messages the same except this time ports 1234 ( 
service subseven) but going to a different outside IP.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]