Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Need a second opinion on this netstat log i may need to reformat due to hacking.

G

GreedyZ

macrumors newbie
Original poster
Mar 27, 2010
1
0
i just need a second opinion to this netstat -n log, i believe i may have been hacked but im not 100% sure and before i go asking friends for there disks ( cus i lost mine when i moved) i want to make sure i need to reformat.

Active Internet connections
Proto Recv-Q Send-Q Local Address Foreign Address (state)
tcp4 0 0 192.168.2.2.52450 66.249.80.164.80 ESTABLISHED
tcp4 0 0 192.168.2.2.52449 96.17.168.32.80 ESTABLISHED
tcp4 0 0 192.168.2.2.52445 72.14.204.100.80 ESTABLISHED
tcp4 0 0 192.168.2.2.52444 64.208.248.161.80 ESTABLISHED
tcp4 0 0 192.168.2.2.52442 66.249.80.154.80 ESTABLISHED
tcp4 0 0 192.168.2.2.52441 66.249.80.154.80 ESTABLISHED
tcp4 0 0 192.168.2.2.52435 66.249.80.148.80 ESTABLISHED
tcp4 0 0 192.168.2.2.52394 66.249.90.104.80 ESTABLISHED
tcp4 0 0 192.168.2.2.50072 64.12.26.81.5190 ESTABLISHED
udp4 0 0 192.168.2.2.123 *.*
udp6 0 0 fe80::225:4bff:f.123 *.*
udp4 0 0 10.37.129.2.88 *.*
udp6 0 0 fe80::21c:42ff:f.88 *.*
udp4 0 0 10.211.55.2.88 *.*
udp6 0 0 fe80::21c:42ff:f.88 *.*
udp4 0 0 192.168.2.2.88 *.*
udp6 0 0 fe80::225:4bff:f.88 *.*
udp6 0 0 fe80::1%lo0.88 *.*
udp4 0 0 127.0.0.1.49370 127.0.0.1.49370
udp4 0 0 *.53351 *.*
udp4 0 0 *.51832 *.*
udp4 0 0 *.60985 *.*
udp4 0 0 *.56772 *.*
udp4 0 0 *.60617 *.*
udp4 0 0 *.55434 *.*
udp4 0 0 *.49377 *.*
udp4 0 0 *.59356 *.*
udp4 0 0 *.49777 *.*
udp4 0 0 *.60749 *.*
udp4 0 0 *.57873 *.*
udp4 0 0 *.5351 *.*
udp4 0 0 *.5350 *.*
udp4 0 0 *.* *.*
udp4 0 0 127.0.0.1.64000 *.*
udp4 0 0 *.631 *.*
udp4 0 0 10.37.129.2.123 *.*
udp6 0 0 fe80::21c:42ff:f.123 *.*
udp4 0 0 10.211.55.2.123 *.*
udp6 0 0 fe80::21c:42ff:f.123 *.*
udp4 0 0 *.65180 *.*
udp4 0 0 *.62404 *.*
udp4 0 0 *.60993 *.*
udp4 0 0 *.56364 *.*
udp4 0 0 *.53967 *.*
udp4 0 0 *.50305 *.*
udp4 0 0 *.61608 *.*
udp4 0 0 *.51374 *.*
udp4 0 0 *.54523 *.*
udp4 0 0 *.51027 *.*
udp6 0 0 ::1.123 *.*
udp4 0 0 127.0.0.1.123 *.*
udp6 0 0 fe80::1%lo0.123 *.*
udp6 0 0 *.123 *.*
udp4 0 0 *.123 *.*
udp4 0 0 *.* *.*
udp6 0 0 *.5353 *.*
udp4 0 0 *.5353 *.*
udp4 0 0 *.* *.*
icm6 0 0 *.* *.*
icm6 0 0 *.* *.*
icm6 0 0 *.* *.*
Active LOCAL (UNIX) domain sockets
Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr
763d6e8 stream 0 0 0 763d550 0 0
763d550 stream 0 0 0 763d6e8 0 0
77495d8 stream 0 0 0 763da18 0 0 /private/var/run/cupsd
763da18 stream 0 0 0 77495d8 0 0
763db28 stream 0 0 0 7719908 0 0
7719908 stream 0 0 0 763db28 0 0
7719220 stream 0 0 0 77496e8 0 0
77496e8 stream 0 0 0 7719220 0 0
7749440 stream 0 0 0 7719b28 0 0
7719b28 stream 0 0 0 7749440 0 0
7719550 stream 0 0 0 0 0 0
763dbb0 stream 0 0 0 0 0 0
763de58 stream 0 0 0 0 0 0
7749b28 stream 0 0 0 7749aa0 0 0 /var/run/mDNSResponder
7749aa0 stream 0 0 0 7749b28 0 0
763d770 stream 0 0 0 7749e58 0 0
7749e58 stream 0 0 0 763d770 0 0
7749908 stream 0 0 0 76fe660 0 0 /var/run/usbmuxd
76fe660 stream 0 0 0 7749908 0 0
763d220 stream 0 0 0 76fe990 0 0 /var/run/mDNSResponder
76fe990 stream 0 0 0 763d220 0 0
76fe880 stream 0 0 0 76fef68 0 0 /var/run/mDNSResponder
76fef68 stream 0 0 0 76fe880 0 0
76fe770 stream 0 0 0 76feee0 0 0 /private/var/run/cupsd
76feee0 stream 0 0 0 76fe770 0 0
7749d48 stream 0 0 0 0 0 0
76fe198 stream 0 0 0 763d7f8 0 0 /var/run/mDNSResponder
763d7f8 stream 0 0 0 76fe198 0 0
7749ee0 stream 0 0 0 7749cc0 0 0
7749cc0 stream 0 0 0 7749ee0 0 0
763d000 stream 0 0 0 76fec38 0 0
76fec38 stream 0 0 0 763d000 0 0
763d330 stream 0 0 0 763d110 0 0
763d110 stream 0 0 0 763d330 0 0
7749c38 stream 0 0 0 7749bb0 0 0
7749bb0 stream 0 0 0 7749c38 0 0
76fe440 stream 0 0 8104090 0 0 0 /tmp/launch-zkNNeE/:0
7719000 stream 0 0 81041b0 0 0 0 /tmp/launch-5TR2fI/Listeners
76fe000 stream 0 0 81042d0 0 0 0 /tmp/launch-QSB1tf/Render
76fe5d8 stream 0 0 8104510 0 0 0 /private/tmp/com.hp.launchport
7719770 stream 0 0 8104900 0 0 0 /tmp/launchd-142.sLQydk/sock
7719aa0 stream 0 0 0 7719ee0 0 0
7719ee0 stream 0 0 0 7719aa0 0 0
76fe908 stream 0 0 0 7719bb0 0 0 /var/run/mDNSResponder
7719bb0 stream 0 0 0 76fe908 0 0
7719330 stream 0 0 0 7719110 0 0 /var/run/mDNSResponder
7719110 stream 0 0 0 7719330 0 0
763d088 stream 0 0 0 7719e58 0 0
7719e58 stream 0 0 0 763d088 0 0
7719f68 stream 0 0 0 76fed48 0 0
76fed48 stream 0 0 0 7719f68 0 0
763d5d8 stream 0 0 0 763d198 0 0 /var/run/asl_input
763d198 stream 0 0 0 763d5d8 0 0
77195d8 stream 0 0 0 7719660 0 0
7719660 stream 0 0 0 77195d8 0 0
7719d48 stream 0 0 0 7719dd0 0 0
7719dd0 stream 0 0 0 7719d48 0 0
76fe2a8 stream 0 0 0 76fe330 0 0
76fe330 stream 0 0 0 76fe2a8 0 0
76fe4c8 stream 0 0 0 76fe550 0 0
76fe550 stream 0 0 0 76fe4c8 0 0
76feb28 stream 0 0 0 76febb0 0 0
76febb0 stream 0 0 0 76feb28 0 0
763d3b8 stream 0 0 0 763d440 0 0
763d440 stream 0 0 0 763d3b8 0 0
763dcc0 stream 0 0 7625510 0 0 0 /var/run/pppconfd
763dd48 stream 0 0 0 763dc38 0 0
763dc38 stream 0 0 0 763dd48 0 0
763df68 stream 0 0 0 763dee0 0 0
763dee0 stream 0 0 0 763df68 0 0
7072000 stream 0 0 0 7072088 0 0
7072088 stream 0 0 0 7072000 0 0
7072110 stream 0 0 0 7072198 0 0 /var/run/mDNSResponder
7072198 stream 0 0 0 7072110 0 0
7072330 stream 0 0 0 7072440 0 0
7072440 stream 0 0 0 7072330 0 0
7072550 stream 0 0 0 70724c8 0 0
70724c8 stream 0 0 0 7072550 0 0
70725d8 stream 0 0 0 70726e8 0 0
70726e8 stream 0 0 0 70725d8 0 0
7072908 stream 0 0 0 70727f8 0 0
70727f8 stream 0 0 0 7072908 0 0
7072880 stream 0 0 0 7072990 0 0
7072990 stream 0 0 0 7072880 0 0
7072a18 stream 0 0 0 7072aa0 0 0
7072aa0 stream 0 0 0 7072a18 0 0
7072c38 stream 0 0 7160b50 0 0 0 /var/tmp/launchd/sock
7072cc0 stream 0 0 7160c70 0 0 0 /private/var/run/cupsd
7072d48 stream 0 0 7160d90 0 0 0 /var/run/usbmuxd
7072e58 stream 0 0 7160eb0 0 0 0 /var/run/asl_input
7072f68 stream 0 0 7160f40 0 0 0 /var/run/portmap.socket
7072ee0 stream 0 0 7149000 0 0 0 /var/run/mDNSResponder
7072bb0 dgram 0 0 0 7072b28 7072b28 0
7072b28 dgram 0 0 0 7072bb0 7072bb0 0
7749770 dgram 0 0 0 7072dd0 0 7749a18
77497f8 dgram 0 0 0 7749880 7749880 0
7749880 dgram 0 0 0 77497f8 77497f8 0
76fe7f8 dgram 0 0 0 76fe110 76fe110 0
76fe110 dgram 0 0 0 76fe7f8 76fe7f8 0
7749a18 dgram 0 0 0 7072dd0 0 7749dd0
7749990 dgram 0 0 0 76fecc0 76fecc0 0
76fecc0 dgram 0 0 0 7749990 7749990 0
76feaa0 dgram 0 0 0 763d4c8 763d4c8 0
763d4c8 dgram 0 0 0 76feaa0 76feaa0 0
76fee58 dgram 0 0 0 763d880 763d880 0
763d880 dgram 0 0 0 76fee58 76fee58 0
7749dd0 dgram 0 0 0 7072dd0 0 77197f8
77197f8 dgram 0 0 0 7072dd0 0 76fedd0
7719cc0 dgram 0 0 0 7719880 7719880 0
7719880 dgram 0 0 0 7719cc0 7719cc0 0
76fedd0 dgram 0 0 0 7072dd0 0 7719c38
7719c38 dgram 0 0 0 7072dd0 0 77192a8
7719088 dgram 0 0 0 76fe6e8 76fe6e8 0
76fe6e8 dgram 0 0 0 7719088 7719088 0
76fe3b8 dgram 0 0 0 77194c8 77194c8 0
77194c8 dgram 0 0 0 76fe3b8 76fe3b8 0
77193b8 dgram 0 0 0 7719198 7719198 0
7719198 dgram 0 0 0 77193b8 77193b8 0
77196e8 dgram 0 0 0 763d2a8 763d2a8 0
763d2a8 dgram 0 0 0 77196e8 77196e8 0
77192a8 dgram 0 0 0 7072dd0 0 763d990
76fe088 dgram 0 0 0 7719a18 7719a18 0
7719a18 dgram 0 0 0 76fe088 76fe088 0
763d990 dgram 0 0 0 7072dd0 0 70723b8
70722a8 dgram 0 0 0 7072220 7072220 0
7072220 dgram 0 0 0 70722a8 70722a8 0
70723b8 dgram 0 0 0 7072dd0 0 7072660
7072660 dgram 0 0 0 7072dd0 0 7072770
7072770 dgram 0 0 0 7072dd0 0 0
7072dd0 dgram 0 0 7160e20 0 7749770 0 /var/run/syslog
 
If someone knows what is all these streams about...

---------
Active Internet connections
Proto Recv-Q Send-Q Local Address Foreign Address (state)
tcp4 0 0 helens-imac.lan.50930 8.17.87.173.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50927 server-216-137-5.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50926 server-216-137-5.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50925 server-216-137-5.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50924 server-216-137-5.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50905 lb3.jacknyfe.net.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50900 ww-in-f149.1e100.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50893 a212.205.43.55.d.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50891 ww-in-f155.1e100.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50890 ew-in-f101.1e100.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50862 prodwebmail-mtc0.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50861 prodwebmail-mtc0.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50850 212.205.43.71.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50849 212.205.43.71.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50848 212.205.43.71.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50847 212.205.43.71.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50846 212.205.43.71.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50845 212.205.43.71.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50841 ww-in-f100.1e100.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50838 ww-in-f99.1e100..http ESTABLISHED
tcp4 0 0 helens-imac.lan.50772 server-216-137-5.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50771 server-216-137-5.http ESTABLISHED
tcp4 0 0 helens-imac.lan.50919 lb2.collective-m.http TIME_WAIT
tcp4 0 0 helens-imac.lan.50931 ec2-75-101-163-1.http TIME_WAIT
tcp4 0 0 helens-imac.lan.50873 64.236.76.160.http TIME_WAIT
udp6 0 0 *.57751 *.*
udp4 0 0 helens-imac.lan.ntp *.*
udp4 0 0 localhost.ntp *.*
udp6 0 0 localhost.ntp *.*
udp6 0 0 localhost.ntp *.*
udp6 0 0 *.ntp *.*
udp4 0 0 *.ntp *.*
udp4 0 0 *.* *.*
udp4 0 0 *.* *.*
udp6 0 0 *.58461 *.*
udp4 0 0 *.58461 *.*
udp6 0 0 *.56168 *.*
udp4 0 0 *.56168 *.*
udp6 0 0 *.55190 *.*
udp4 0 0 *.55190 *.*
udp6 0 0 *.54624 *.*
udp4 0 0 *.54624 *.*
udp6 0 0 *.58489 *.*
udp4 0 0 *.58489 *.*
udp6 0 0 *.59013 *.*
udp4 0 0 *.59013 *.*
udp6 0 0 *.52501 *.*
udp4 0 0 *.52501 *.*
udp6 0 0 *.62108 *.*
udp4 0 0 *.62108 *.*
udp6 0 0 *.55664 *.*
udp4 0 0 *.55664 *.*
udp6 0 0 *.64122 *.*
udp4 0 0 *.64122 *.*
udp4 0 0 *.* *.*
udp6 0 0 *.mdns *.*
udp4 0 0 *.mdns *.*
udp4 0 0 *.* *.*
udp4 0 0 *.* *.*
Active LOCAL (UNIX) domain sockets
Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr
8b6abe0 stream 0 0 0 8312090 0 0 /var/run/mDNSResponder
8312090 stream 0 0 0 8b6abe0 0 0
8312bd0 stream 0 0 0 8312a20 0 0 /var/run/mDNSResponder
8312a20 stream 0 0 0 8312bd0 0 0
8313200 stream 0 0 9b70ea4 0 0 0 /tmp/icssuis501
8312900 stream 0 0 0 8b69290 0 0 /var/run/mDNSResponder
8b69290 stream 0 0 0 8312900 0 0
8b69c20 stream 0 0 0 8b69dd0 0 0 /var/run/usbmuxd
8b69dd0 stream 0 0 0 8b69c20 0 0
8b69950 stream 0 0 0 8b699e0 0 0
8b699e0 stream 0 0 0 8b69950 0 0
8b694d0 stream 0 0 0 8b695f0 0 0 /var/run/mDNSResponder
8b695f0 stream 0 0 0 8b694d0 0 0
8b6a010 stream 0 0 0 8313b90 0 0
8313b90 stream 0 0 0 8b6a010 0 0
83139e0 stream 0 0 0 83137a0 0 0 /var/run/mDNSResponder
83137a0 stream 0 0 0 83139e0 0 0
8313680 stream 0 0 0 83127e0 0 0 /tmp/launchd-78.sDPfvm/sock
83127e0 stream 0 0 0 8313680 0 0
8313560 stream 0 0 0 83126c0 0 0 /var/run/mDNSResponder
83126c0 stream 0 0 0 8313560 0 0
8312ea0 stream 0 0 0 8312fc0 0 0 /var/run/mDNSResponder
8312fc0 stream 0 0 0 8312ea0 0 0
8b6a130 stream 0 0 0 8312240 0 0
8312240 stream 0 0 0 8b6a130 0 0
83123f0 stream 0 0 0 8312c60 0 0
8312c60 stream 0 0 0 83123f0 0 0
8312000 stream 0 0 0 8b6aeb0 0 0
8b6aeb0 stream 0 0 0 8312000 0 0
83130e0 stream 0 0 0 8b6a6d0 0 0
8b6a6d0 stream 0 0 0 83130e0 0 0
8b6a0a0 stream 0 0 94f3a98 0 0 0 /tmp/launch-YeMmZb/:0
8312120 stream 0 0 94f3bc0 0 0 0 /tmp/launch-ZUm0Qr/Listeners
8313050 stream 0 0 94f3ce8 0 0 0 /tmp/launch-4lk1Qr/Render
8b6a760 stream 0 0 94cc000 0 0 0 /tmp/launchd-78.sDPfvm/sock
83121b0 stream 0 0 0 8b6a7f0 0 0
8b6a7f0 stream 0 0 0 83121b0 0 0
8b6aa30 stream 0 0 0 8b6a880 0 0
8b6a880 stream 0 0 0 8b6aa30 0 0
8b6aac0 stream 0 0 0 8b6a250 0 0
8b6a250 stream 0 0 0 8b6aac0 0 0
8312e10 stream 0 0 0 8312630 0 0
8312630 stream 0 0 0 8312e10 0 0
8b6a1c0 stream 0 0 0 8b6a910 0 0
8b6a910 stream 0 0 0 8b6a1c0 0 0
8312990 stream 0 0 0 83135f0 0 0
83135f0 stream 0 0 0 8312990 0 0
8b6a520 stream 0 0 0 8b6a5b0 0 0
8b6a5b0 stream 0 0 0 8b6a520 0 0
83122d0 stream 0 0 0 8312360 0 0
8312360 stream 0 0 0 83122d0 0 0
8312510 stream 0 0 0 83125a0 0 0
83125a0 stream 0 0 0 8312510 0 0
8312ab0 stream 0 0 0 8312b40 0 0
8312b40 stream 0 0 0 8312ab0 0 0
8312cf0 stream 0 0 0 8312d80 0 0
8312d80 stream 0 0 0 8312cf0 0 0
8313290 stream 0 0 0 8313320 0 0
8313320 stream 0 0 0 8313290 0 0
8313830 stream 0 0 0 83138c0 0 0
83138c0 stream 0 0 0 8313830 0 0
8313d40 stream 0 0 875f40c 0 0 0 /var/run/pppconfd
8313e60 stream 0 0 0 8313ef0 0 0
8313ef0 stream 0 0 0 8313e60 0 0
83140a0 stream 0 0 0 8314130 0 0
8314130 stream 0 0 0 83140a0 0 0
8314250 stream 0 0 0 83141c0 0 0 /var/tmp/launchd/sock
83141c0 stream 0 0 0 8314250 0 0
8314370 stream 0 0 0 83142e0 0 0
83142e0 stream 0 0 0 8314370 0 0
8314490 stream 0 0 0 8314400 0 0
8314400 stream 0 0 0 8314490 0 0
83145b0 stream 0 0 0 8314520 0 0
8314520 stream 0 0 0 83145b0 0 0
83146d0 stream 0 0 0 8314640 0 0
8314640 stream 0 0 0 83146d0 0 0
8314760 stream 0 0 0 83147f0 0 0
83147f0 stream 0 0 0 8314760 0 0
83149a0 stream 0 0 855e6f0 0 0 0 /var/tmp/launchd/sock
8314a30 stream 0 0 855e818 0 0 0 /private/var/run/cupsd
8314ac0 stream 0 0 855e9d4 0 0 0 /var/run/usbmuxd
8314b50 stream 0 0 855ea68 0 0 0 /var/run/asl_input
8314c70 stream 0 0 855eb90 0 0 0 /var/run/SCHelper
8314d00 stream 0 0 855ec24 0 0 0 /var/run/vpncontrol.sock
8314d90 stream 0 0 855ecb8 0 0 0 /private/var/run/printtool
8314e20 stream 0 0 855ed4c 0 0 0 /var/run/portmap.socket
8314f40 stream 0 0 855ede0 0 0 0 /var/run/mDNSResponder
8314eb0 stream 0 0 855ee74 0 0 0 /var/run/com.apple.ActivityMonitor.socket
8b698c0 dgram 0 0 0 8b68fc0 8b68fc0 0
8b68fc0 dgram 0 0 0 8b698c0 8b698c0 0
8313b00 dgram 0 0 0 8b69050 8b69050 0
8b69050 dgram 0 0 0 8313b00 8313b00 0
8b693b0 dgram 0 0 0 8b69440 8b69440 0
8b69440 dgram 0 0 0 8b693b0 8b693b0 0
8b69560 dgram 0 0 0 8b69710 8b69710 0
8b69710 dgram 0 0 0 8b69560 8b69560 0
8b69e60 dgram 0 0 0 8b69d40 8b69d40 0
8b69d40 dgram 0 0 0 8b69e60 8b69e60 0
8b69f80 dgram 0 0 0 8b69ef0 8b69ef0 0
8b69ef0 dgram 0 0 0 8b69f80 8b69f80 0
8313440 dgram 0 0 0 8312480 8312480 0
8312480 dgram 0 0 0 8313440 8313440 0
8b6a370 dgram 0 0 0 8b6ab50 8b6ab50 0
8b6ab50 dgram 0 0 0 8b6a370 8b6a370 0
8313170 dgram 0 0 0 8b6af40 8b6af40 0
8b6af40 dgram 0 0 0 8313170 8313170 0
8312f30 dgram 0 0 0 8313710 8313710 0
8313710 dgram 0 0 0 8312f30 8312f30 0
83134d0 dgram 0 0 0 8312750 8312750 0
8312750 dgram 0 0 0 83134d0 83134d0 0
8314010 dgram 0 0 0 8313f80 8313f80 0
8313f80 dgram 0 0 0 8314010 8314010 0
8314be0 dgram 0 0 855eafc 0 0 0 /var/run/syslog:eek:

Thank you for your time
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back