Re: Someone hacking my i5?

["Jim Franz" <franz400@xxxxxxxxxxxx>]

what tcp servers are running?
use netstat cmd and opt 3 to display connections
see what remote addresses connected
jim franz
----- Original Message ----- 
From: "albartell" <albartell@xxxxxxxxx>
To: "'Midrange Systems Technical Discussion'" <midrange-l@xxxxxxxxxxxx>
Sent: Friday, September 07, 2007 8:33 AM
Subject: Someone hacking my i5?


> I was doing a DSPMSG QSYSOPR today and noticed some messages I am not used
> to seeing and was curious to know if anybody might know where they are
> coming from.
>
> TCP/IP connection to remote system 222.216.28.135 closed, reason code 2.
> TCP/IP connection to remote system 125.65.112.108 closed, reason code 2.
> TCP/IP connection to remote system 222.216.28.135 closed, reason code 2.
> TCP/IP connection to remote system 38.98.163.9 closed, reason code 2.
> ...
>
> Reason codes and their meanings follow:
>    2 = TCP connection closed due to R2 retry threshold being run.
>
>
> None of those IP addresses are from my LAN/WAN (obviously).
>
> Thanks,
> Aaron Bartell
> http://mowyourlawn.com
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.