Allegedly, on or about 04 March 2016, Richard Ibbotson sent: > netstat -nap | grep :21 shows.... > > tcp 0 0 192.168.2.10:60088 195.154.162.172:21 > ESTABLISHED > > netstat -aunt shows... > > tcp 0 0 192.168.2.10:60088 195.154.162.172:21 > ESTABLISHED Get even more info from netstat, add the e (extend) and v (verbose) options, as well. And do it as root, you're further limited if you only do it as an ordinary user. Oh, and just because it's using port 21 doesn't necessarily mean that it's doing FTP, that's just the recognised common use of the port. If you're infiltrated, it could be doing anything. You, most likely, need to be more concerned about what process is using port 60088. Are you doing *any* kind of peer-to-peer? -- [tim@localhost ~]$ uname -rsvp Linux 3.9.10-100.fc17.x86_64 #1 SMP Sun Jul 14 01:31:27 UTC 2013 x86_64 Boilerplate: All mail to my mailbox is automatically deleted, there is no point trying to privately email me, I only get to see the messages posted to the mailing list. Long ago I gave up on using Windows (TM) [Tantrum Machine], and I've never regretted it. -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org