Date: Thu, 04 Apr 2002 11:39:17 -0500 From: "Joseph Wright" <jwright@mbakercorp.com> To: <questions@freebsd.org>, <Dewhirst.M@UCLES.org.uk> Subject: Re: have I been hacked?! Message-ID: <scac3bdf.004@mbakercorp.com>
next in thread | raw e-mail | index | archive | help
These might just be pieces of software that were installed a while back. Both are valid pieces of software listening on the correct port. netcheque on 4008 is used for the NetCheque Accounting package and funproxy 1505 is used for Funk Software, Inc. proxy server you might want to check who owns the process use: sockstat >>> Mike Dewhirst <Dewhirst.M@UCLES.org.uk> 04/04/02 05:13PM >>> I did a netscan of my box (which I;ve not done for 2-3 months or so) and spotted this: 1505/tcp open funkproxy 4008/tcp open netcheque I've never heard of either. Has the system been compromised? Any help would be extremely appreciated. Mike This message was written in plain text mode. Everything below the dotted line was not written by the author of this email. ---------------------- =********************************************************** If you are not the intended recipient, employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination or copying of this communication and its attachments is strictly prohibited. If you have received this communication and its attachments in error, please return the original message and attachments to the sender using the reply facility on e-mail. Internet communications are not secure and therefore the UCLES Group does not accept legal responsibility for the contents of this message. Any views or opinions presented are solely those of the author and do not necessarily represent those of the UCLES Group unless otherwise specifically stated. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses although this does not guarantee that this email is virus free. **********************************************************= To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?scac3bdf.004>