Re: how to detect hack attempts.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2020-02-21 10:43, home user wrote:
> (on 02/20/2020 at 3:59pm mountain time, Ed said)
> > sudo netstat -napt | grep -i listen
> I did it twice, the extra time to get the column headers.  Splicing the two together...
>
> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address           Foreign Address State       PID/Program name
> tcp        0      0 0.0.0.0:111             0.0.0.0:* LISTEN      1/systemd
> tcp        0      0 192.168.122.1:53        0.0.0.0:* LISTEN      1252/dnsmasq
> tcp        0      0 0.0.0.0:631             0.0.0.0:* LISTEN      1081/cupsd
> tcp        0      0 127.0.0.1:25            0.0.0.0:* LISTEN      2068/sendmail: acce
> tcp6       0      0 :::111                  :::* LISTEN      1/systemd
> tcp6       0      0 :::631                  :::* LISTEN      1081/cupsd
>
> Is this what it should be?  Anything I should do?  I guess it's not relevant to the current matter, but should cupsd be in the list twice?

As already noted, cupsd is listening on both ipv4 and ipv6.

It isn't important, but I would note there is an unnecessary service running on port 111.  That
would be rpcbind.

As time permits I'd check

systemctl status rpcbind

and

systemctl status rpcbind.socket

-- 
The key to getting good answers is to ask good questions.
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux