Connessione sospetta. Che roba è???

[frakka]

Ok, stò diventando noioso. Scusatemi ma mi ha preso la paranoia da Grande Fratello.

Il firewall blocca in continuazione un tentativi di connessioni derivanti da ICMP, e fino qui è normale.

Però mi ha appena bloccato delle connessioni in uscita FTP, DNS, Telnet e NFS da questo pc verso questo indirizzo IP: 189.130.89.250

Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2007-05-24 11:21:21 (BRT -03:00)

inetnum: 189.128/11
status: reallocated
owner: Uninet S.A. de C.V.
ownerid: MX-USCV4-LACNIC

Sembra un DNS. Vero?

[betaxp86]

Prova a chiudere emule, stabilisce troppe connessioni per capirci qualcosa...

[betaxp86]

Quello è un IP messicano secondo un'altro whois...
Chiudi tutte le comunicazioni non esplicitamente autorizzate, chiudi i servizi che non usi...

[frakka]

ps aux |grep Fido

matteo 12725 0.0 0.0 2860 776 pts/1 S+ 18:30 0:00 grep Fido

netstat |grep Fido
- nulla -

netstat

Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 1 192.168.0.3:4664 CPE-124-180-228-1:60286 FIN_WAIT1
tcp 1 0 192.168.0.3:59476 www.worldcommunit:https CLOSE_WAIT
tcp 1 0 192.168.0.3:51293 www.worldcommunit:https CLOSE_WAIT
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ] DGRAM 4808 @/com/ubuntu/upstart
unix 2 [ ] DGRAM 4926 @/org/kernel/udev/udevd
unix 7 [ ] DGRAM 9081 /dev/log
unix 3 [ ] STREAM CONNECTED 41168 /tmp/jpsock.160.4535
unix 3 [ ] STREAM CONNECTED 41167
unix 2 [ ] STREAM CONNECTED 41164
unix 10 [ ] STREAM CONNECTED 41162 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 41161
unix 3 [ ] STREAM CONNECTED 41158 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 41157
unix 3 [ ] STREAM CONNECTED 41150
unix 3 [ ] STREAM CONNECTED 41149
unix 3 [ ] STREAM CONNECTED 41148
unix 3 [ ] STREAM CONNECTED 41147
unix 3 [ ] STREAM CONNECTED 41146
unix 3 [ ] STREAM CONNECTED 41145
unix 3 [ ] STREAM CONNECTED 41144
unix 3 [ ] STREAM CONNECTED 41143
unix 3 [ ] STREAM CONNECTED 33765 /tmp/.esd-1000/socket
unix 3 [ ] STREAM CONNECTED 33764
unix 2 [ ] STREAM 33759
unix 3 [ ] STREAM CONNECTED 28636
unix 3 [ ] STREAM CONNECTED 28635
unix 3 [ ] STREAM CONNECTED 28633 /tmp/orbit-matteo/linc-239e-0-34c5466a7869e
unix 3 [ ] STREAM CONNECTED 28632
unix 3 [ ] STREAM CONNECTED 28631 /tmp/orbit-matteo/linc-1136-0-2586d4bc19a5
unix 3 [ ] STREAM CONNECTED 28630
unix 3 [ ] STREAM CONNECTED 28629 /tmp/orbit-matteo/linc-239e-0-34c5466a7869e
unix 3 [ ] STREAM CONNECTED 28628
unix 3 [ ] STREAM CONNECTED 28625 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 28624
unix 3 [ ] STREAM CONNECTED 28622 /tmp/.ICE-unix/4333
unix 3 [ ] STREAM CONNECTED 28621
unix 3 [ ] STREAM CONNECTED 28617 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 28616
unix 3 [ ] STREAM CONNECTED 12271 /tmp/.esd-0/socket
unix 3 [ ] STREAM CONNECTED 12270
unix 2 [ ] STREAM 12263
unix 3 [ ] STREAM CONNECTED 12255 /tmp/orbit-root/linc-120b-0-1ef2a85db87cc
unix 3 [ ] STREAM CONNECTED 12254
unix 3 [ ] STREAM CONNECTED 12253 /tmp/orbit-root/linc-120d-0-27bd9f3aaf21f
unix 3 [ ] STREAM CONNECTED 12242
unix 2 [ ] DGRAM 12232
unix 3 [ ] STREAM CONNECTED 12219 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 12218
unix 3 [ ] STREAM CONNECTED 12200 /tmp/orbit-matteo/linc-120a-0-1187db25dfcfe
unix 3 [ ] STREAM CONNECTED 12199
unix 3 [ ] STREAM CONNECTED 12196 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 12195
unix 372 [ ] STREAM CONNECTED 12191 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 12190
unix 3 [ ] STREAM CONNECTED 11728 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 11727
unix 3 [ ] STREAM CONNECTED 10655 /tmp/orbit-matteo/linc-11b7-0-1df67dbd276b6
unix 3 [ ] STREAM CONNECTED 10654
unix 3 [ ] STREAM CONNECTED 10651 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 10650
unix 3 [ ] STREAM CONNECTED 10639 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 10638
unix 3 [ ] STREAM CONNECTED 10346 @/tmp/dbus-rB0nEPRZOk
unix 3 [ ] STREAM CONNECTED 10345
unix 3 [ ] STREAM CONNECTED 10344 /tmp/orbit-matteo/linc-11ac-0-76aa785aa4bb8
unix 3 [ ] STREAM CONNECTED 10343
unix 3 [ ] STREAM CONNECTED 10340 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 10339
unix 3 [ ] STREAM CONNECTED 10333 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 10332
unix 3 [ ] STREAM CONNECTED 10159 /tmp/orbit-matteo/linc-1130-0-7ede3ad625439
unix 3 [ ] STREAM CONNECTED 10157
unix 3 [ ] STREAM CONNECTED 10156 /tmp/orbit-matteo/linc-117b-0-d2cb1ed9db49
unix 3 [ ] STREAM CONNECTED 10155
unix 3 [ ] STREAM CONNECTED 10146 /tmp/orbit-matteo/linc-1130-0-7ede3ad625439
unix 3 [ ] STREAM CONNECTED 10145
unix 3 [ ] STREAM CONNECTED 10144 /tmp/orbit-matteo/linc-117d-0-d2cb1edba755
unix 3 [ ] STREAM CONNECTED 10142
unix 3 [ ] STREAM CONNECTED 10134 /tmp/orbit-matteo/linc-117d-0-d2cb1edba755
unix 3 [ ] STREAM CONNECTED 10133
unix 3 [ ] STREAM CONNECTED 10132 /tmp/orbit-matteo/linc-1136-0-2586d4bc19a5
unix 3 [ ] STREAM CONNECTED 10131
unix 3 [ ] STREAM CONNECTED 10130 /tmp/orbit-matteo/linc-117d-0-d2cb1edba755
unix 3 [ ] STREAM CONNECTED 10129
unix 3 [ ] STREAM CONNECTED 10126 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 10125
unix 3 [ ] STREAM CONNECTED 10121 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 10120
unix 3 [ ] STREAM CONNECTED 10115 /tmp/orbit-matteo/linc-117b-0-d2cb1ed9db49
unix 3 [ ] STREAM CONNECTED 10114
unix 3 [ ] STREAM CONNECTED 10113 /tmp/orbit-matteo/linc-1136-0-2586d4bc19a5
unix 3 [ ] STREAM CONNECTED 10112
unix 3 [ ] STREAM CONNECTED 10111 /tmp/orbit-matteo/linc-117b-0-d2cb1ed9db49
unix 3 [ ] STREAM CONNECTED 10110
unix 3 [ ] STREAM CONNECTED 10107 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 10106
unix 3 [ ] STREAM CONNECTED 10102 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 10101
unix 3 [ ] STREAM CONNECTED 10058 /tmp/orbit-matteo/linc-1130-0-7ede3ad625439
unix 3 [ ] STREAM CONNECTED 10057
unix 3 [ ] STREAM CONNECTED 10056 /tmp/orbit-matteo/linc-1166-0-184d4db8aadd7
unix 3 [ ] STREAM CONNECTED 10055
unix 3 [ ] STREAM CONNECTED 10048 @/tmp/dbus-rB0nEPRZOk
unix 3 [ ] STREAM CONNECTED 10047
unix 3 [ ] STREAM CONNECTED 10046 /tmp/orbit-matteo/linc-1166-0-184d4db8aadd7
unix 3 [ ] STREAM CONNECTED 10045
unix 3 [ ] STREAM CONNECTED 10044 /tmp/orbit-matteo/linc-1136-0-2586d4bc19a5
unix 3 [ ] STREAM CONNECTED 10043
unix 3 [ ] STREAM CONNECTED 10042 /tmp/orbit-matteo/linc-1166-0-184d4db8aadd7
unix 3 [ ] STREAM CONNECTED 10041
unix 3 [ ] STREAM CONNECTED 10038 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 10037
unix 3 [ ] STREAM CONNECTED 10033 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 10032
unix 3 [ ] STREAM CONNECTED 10019 /tmp/mapping-matteo
unix 3 [ ] STREAM CONNECTED 10011
unix 3 [ ] STREAM CONNECTED 9999 @/tmp/dbus-rB0nEPRZOk
unix 3 [ ] STREAM CONNECTED 9998
unix 3 [ ] STREAM CONNECTED 9921 /tmp/orbit-matteo/linc-1132-0-20a12cd525f8b
unix 3 [ ] STREAM CONNECTED 9920
unix 3 [ ] STREAM CONNECTED 9919 /tmp/orbit-matteo/linc-1130-0-7ede3ad625439
unix 3 [ ] STREAM CONNECTED 9918
unix 3 [ ] STREAM CONNECTED 9917 /tmp/orbit-matteo/linc-1136-0-2586d4bc19a5
unix 3 [ ] STREAM CONNECTED 9915
unix 3 [ ] STREAM CONNECTED 9916 /tmp/orbit-matteo/linc-1136-0-2586d4bc19a5
unix 3 [ ] STREAM CONNECTED 9914
unix 3 [ ] STREAM CONNECTED 9902 /tmp/orbit-matteo/linc-1139-0-6ff63adf617e6
unix 3 [ ] STREAM CONNECTED 9901
unix 3 [ ] STREAM CONNECTED 9898 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 9897
unix 3 [ ] STREAM CONNECTED 9894 @/tmp/dbus-rB0nEPRZOk
unix 3 [ ] STREAM CONNECTED 9893
unix 3 [ ] STREAM CONNECTED 9866 @/tmp/dbus-rB0nEPRZOk
unix 3 [ ] STREAM CONNECTED 9865
unix 3 [ ] STREAM CONNECTED 9850 /tmp/orbit-matteo/linc-1132-0-20a12cd525f8b
unix 3 [ ] STREAM CONNECTED 9849
unix 3 [ ] STREAM CONNECTED 9846 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 9845
unix 3 [ ] STREAM CONNECTED 9843 /tmp/orbit-matteo/linc-1130-0-7ede3ad625439
unix 3 [ ] STREAM CONNECTED 9842
unix 3 [ ] STREAM CONNECTED 9839 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 9838
unix 3 [ ] STREAM CONNECTED 9836 /tmp/.ICE-unix/4333
unix 3 [ ] STREAM CONNECTED 9834
unix 3 [ ] STREAM CONNECTED 9830 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 9829
unix 3 [ ] STREAM CONNECTED 9835 /tmp/.ICE-unix/4333
unix 3 [ ] STREAM CONNECTED 9822
unix 3 [ ] STREAM CONNECTED 9816 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 9815
unix 3 [ ] STREAM CONNECTED 9805 /tmp/.ICE-unix/4333
unix 3 [ ] STREAM CONNECTED 9804
unix 3 [ ] STREAM CONNECTED 9803 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 9802
unix 3 [ ] STREAM CONNECTED 9801 /tmp/orbit-matteo/linc-112b-0-7065dcac97025
unix 3 [ ] STREAM CONNECTED 9800
unix 3 [ ] STREAM CONNECTED 9797 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 9796
unix 3 [ ] STREAM CONNECTED 9751 @/tmp/dbus-rB0nEPRZOk
unix 3 [ ] STREAM CONNECTED 9750
unix 3 [ ] STREAM CONNECTED 9743 /tmp/orbit-matteo/linc-111e-0-c3b23163f26b
unix 3 [ ] STREAM CONNECTED 9742
unix 3 [ ] STREAM CONNECTED 9739 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 9738
unix 3 [ ] STREAM CONNECTED 9734 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 9733
unix 3 [ ] STREAM CONNECTED 9720 @/tmp/dbus-rB0nEPRZOk
unix 3 [ ] STREAM CONNECTED 9719
unix 3 [ ] STREAM CONNECTED 9692 /tmp/orbit-matteo/linc-10ed-0-2b42f6ae45def
unix 3 [ ] STREAM CONNECTED 9691
unix 3 [ ] STREAM CONNECTED 9690 /tmp/orbit-matteo/linc-1118-0-543ac4a36c9c
unix 3 [ ] STREAM CONNECTED 9549
unix 2 [ ] DGRAM 9535
unix 3 [ ] STREAM CONNECTED 9529 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 9528
unix 3 [ ] STREAM CONNECTED 9525 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 9524
unix 3 [ ] STREAM CONNECTED 9523
unix 3 [ ] STREAM CONNECTED 9522
unix 2 [ ] DGRAM 9470
unix 2 [ ] DGRAM 9328
unix 3 [ ] STREAM CONNECTED 9291 /var/run/acpid.socket
unix 3 [ ] STREAM CONNECTED 9290
unix 6 [ ] STREAM CONNECTED 9432 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 9289
unix 2 [ ] DGRAM 9126
unix 3 [ ] STREAM CONNECTED 8710 @/com/ubuntu/upstart/logd
unix 3 [ ] STREAM CONNECTED 8709

netstat |grep tcp

tcp 1 0 192.168.0.3:59476 www.worldcommunit:https CLOSE_WAIT
tcp 1 0 192.168.0.3:51293 www.worldcommunit:https CLOSE_WAIT

Ripetuto, chiudendo aMule. C'è funzionante solo boinc in background che comunica con il server del wcg. e questo

tcp 0 1 192.168.0.3:4664 CPE-124-180-228-1:60286 FIN_WAIT1

che non sò cosa sia.
Il grosso di quel log dovrebbero essere le connessioni tra i veri server di linux, vero? Non sono comunicazioni verso l'esterno. Mi sembra tutto a posto, confermi?