User profile for user: jameso1111
jameso1111 Author
User level: Level 1
9 points

MBP was hacked? Help for a Newbie.

Hi everyone. I think my WEP was cracked and my MBP was hacked. WEP was cracked because the lock is gone. Tried to restart, sorry don't have access to router to restart that or confirm connections on that hardware. Connecting to MBP via airport. Have been in system preferences and attempted to re-connect with WEP passowrd. I've learned online that WEP2 is better, so lesson learned. If I post the netstat commands I ran would you be able to tell me if my system has been hacked? From my newbie knowledge of how to read netstat I thinkit was- There have been connections to open port numbers in the 5000 range from which I have read online is an alert. Also, I do not recognize the ip addresses or hostnames and also I see files were sent and received. I've run Mac Scan trial version - but from my knowledge this does not confirm connections to my computer from an ulocked airport connection. Additionally, all of a sudden I have theDS_Store on my system, is this an indicator of a hack. Sorry guys and gals for all the Q's.If this is the incorrect forum for the question could you kindly point me to where I would ask this. Thanks for any help. JO😐

MacBook Pro, Mac OS X (10.6.8)

Posted on Dec 29, 2011 3:08 PM

Reply
16 replies
User profile for user: noondaywitch
noondaywitch
User level: Level 6
8,177 points

Dec 29, 2011 3:59 PM in response to jameso1111

.DS_store is a file placed on every volume and in every folder by Finder. It stores information which Finder uses to display the folder and it's contents as you've set them up.

It should not be visible - it's a hidden folder.


WEP and WEP2 are way out of date and easily cracked with the firepower of today's computers. You need to be using WPA2.


By all means post the netstat log - someone will be able to interpret it I'm sure.


Bedtime on this side of the pond, though. 😎

Reply
User profile for user: fane_j
fane_j
User level: Level 4
3,704 points

Dec 29, 2011 9:30 PM in response to jameso1111

Maybe you were hacked, and maybe not. Difficult to say without details. However, often enough, when encountering an unexpected behaviour, less experienced users jump to the conclusion that they've been infected by malware or they've been hacked. In fact, overall, this is not particularly likely.


As noondaywitch says, .DS_Store (Desktop Services Store) are files automatically created by Finder in every accessed folder. As a rule, Finder doesn't display 'invisible' files (those whose names begin with a period), but obviously this setting was changed -- not necessarily by a hacker, though.


I couldn't agree more with noondaywitch's caution about WEP and WEP2. These encryption methods, which have been deprecated, are essentially useless. Anyone can download off the 'net a Win boot ISO image with all the tools required and full instructions to break them in minutes -- one doesn't need any expertise or even to install anything on one's own boot volume. You shouldn't even think of using wireless w/o WPA2.

Reply
User profile for user: jameso1111
jameso1111 Author
User level: Level 1
9 points

Dec 29, 2011 10:03 PM in response to fane_j

Thanks people. I xed out some info I think is personal ip or isp - let me know if you needed this info. i called it my ip but maybe it is my isp - in any case, it starts with 192. Let me know also if i posted too much info.


netstat - It's alot of info. on the internet I see amazon web servers is Ec2 is this- and from what I read this is a way to transfer files.


Today I closed all browsers, and ran netstst -n and netstat.


as I noticed other times I ran and lookedup the ip address that they were browser tabs that I had opened (makes sense- it's reading what my computer is connected to).....


Thanks guys.and if i was hacked should I take computer to genius bar or police?


- JO

______________________

From today

netstat -n


Proto Recv-Q Send-Q Local Address Foreign Address (state)

tcp4 0 2119 XXXXXXXXX2.54750 74.125.224.181.443 ESTABLISHED

tcp4 0 0 XXXXXXXXX2.54749 74.125.224.181.443 ESTABLISHED

tcp4 0 0 XXXXXXXXX2.54748 74.125.224.189.443 ESTABLISHED

tcp4 0 201 XXXXXXXXX2.54747 75.11XXXXXX.108.134.443 ESTABLISHED

tcp4 0 0 XXXXXXXXX2.54745 199.47.217.177.443 ESTABLISHED

tcp4 0 0 XXXXXXXXX2.54741 199.47.216.144.80 ESTABLISHED

tcp4 37 0 XXXXXXXXX6.54707 107.20.249.252.443 CLOSE_WAIT

tcp4 37 0 XXXXXXXXX6.54706 107.20.249.104.443 CLOSE_WAIT

tcp4 37 0 XXXXXXXXX6.54705 199.47.216.172.443 CLOSE_WAIT

tcp4 37 0 XXXXXXXXX6.54702 199.47.217.178.443 CLOSE_WAIT

tcp4 37 0 10.0.1.6.54521 199.47.216.173.443 CLOSE_WAIT

tcp4 0 0 127.0.0.1.26165 127.0.0.1.50379 ESTABLISHED

tcp4 0 0 127.0.0.1.50379 127.0.0.1.26165 ESTABLISHED

tcp4 37 0 10.0.1.6.49394 107.20.249.164.443 CLOSE_WAIT

tcp4 0 0 XXXXXXXXX2.54743 69.58.188.38.443 TIME_WAIT

tcp4 0 0 XXXXXXXXX2.54744 199.59.148.10.80 TIME_WAIT

tcp4 0 0 XXXXXXXXX2.54742 69.58.188.38.443 TIME_WAIT

tcp4 0 0 XXXXXXXXX2.54724 74.125.224.243.443 TIME_WAIT

udp4 0 0 *.* *.*

udp6 0 0 *.60916 *.*

udp4 0 0 *.60916 *.*

udp4 0 0 XXXXXXXXX2.123 *.*

udp6 0 0 *.53780 *.*

udp4 0 0 *.53780 *.*

udp6 0 0 *.62813 *.*

udp4 0 0 *.62813 *.*

udp6 0 0 *.63440 *.*

udp4 0 0 *.63440 *.*

udp6 0 0 *.56188 *.*

udp4 0 0 *.56188 *.*

udp6 0 0 *.55626 *.*

udp4 0 0 *.55626 *.*

udp6 0 0 *.56269 *.*

udp4 0 0 *.56269 *.*

udp6 0 0 fe80::e2f8:47ff:.123 *.*

udp4 0 0 *.* *.*

udp4 0 0 *.17500 *.*

udp4 0 0 127.0.0.1.123 *.*

udp6 0 0 fe80::1%lo0.123 *.*

udp6 0 0 ::1.123 *.*

udp6 0 0 *.123 *.*

udp4 0 0 *.123 *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

udp6 0 0 *.5353 *.*

udp4 0 0 *.5353 *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

icm4 0 0 *.* *.*

icm6 0 0 *.* *.*

Active LOCAL (UNIX) domain sockets

Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr

ffffff80119bc700 stream 0 0 0 ffffff80119baa80 0 0 /var/run/mDNSResponder

ffffff80119baa80 stream 0 0 0 ffffff80119bc700 0 0

ffffff80119ba900 stream 0 0 0 ffffff80119bba40 0 0

ffffff80119bba40 stream 0 0 0 ffffff80119ba900 0 0

ffffff800d9c52c0 stream 0 0 0 0 0 0

ffffff800d9c4600 stream 0 0 0 ffffff80119bad80 0 0 /var/run/mDNSResponder

ffffff80119bad80 stream 0 0 0 ffffff800d9c4600 0 0

ffffff800d9c5b00 stream 0 0 0 ffffff800c369d40 0 0 /var/run/mDNSResponder

ffffff800c369d40 stream 0 0 0 ffffff800d9c5b00 0 0

ffffff800c369c80 stream 0 0 0 0 0 0

ffffff80119bcf40 stream 0 0 0 ffffff80119bce80 0 0 /.dbfseventsd

ffffff80119bce80 stream 0 0 0 ffffff80119bcf40 0 0

ffffff800d9c4000 stream 0 0 ffffff800fcd81f0 0 0 0 /.dbfseventsd

ffffff800bda9540 stream 0 0 0 ffffff800d9c4fc0 0 0

ffffff800d9c4fc0 stream 0 0 0 ffffff800bda9540 0 0

ffffff800d9c4300 stream 0 0 0 ffffff800d9c4240 0 0 /tmp/launchd-95.uZCVf1/sock

ffffff800d9c4240 stream 0 0 0 ffffff800d9c4300 0 0

ffffff800d9c43c0 stream 0 0 0 ffffff800d9c4480 0 0

ffffff800d9c4480 stream 0 0 0 ffffff800d9c43c0 0 0

ffffff800d9c5140 stream 0 0 0 ffffff800d9c5080 0 0 /var/run/mDNSResponder

ffffff800d9c5080 stream 0 0 0 ffffff800d9c5140 0 0

ffffff800c36a100 stream 0 0 0 ffffff800bda9600 0 0 /var/run/mDNSResponder

ffffff800bda9600 stream 0 0 0 ffffff800c36a100 0 0

ffffff800c369bc0 stream 0 0 0 ffffff800bda9cc0 0 0 /var/tmp/launchd/sock

ffffff800bda9cc0 stream 0 0 0 ffffff800c369bc0 0 0

ffffff800c368840 stream 0 0 0 ffffff800d9c6940 0 0 /var/run/mDNSResponder

ffffff800d9c6940 stream 0 0 0 ffffff800c368840 0 0

ffffff800bdaa200 stream 0 0 0 ffffff800bdaa140 0 0 /var/run/mDNSResponder

ffffff800bdaa140 stream 0 0 0 ffffff800bdaa200 0 0

ffffff800d9c5e00 stream 0 0 0 ffffff800d9c5ec0 0 0 /var/run/usbmuxd

ffffff800d9c5ec0 stream 0 0 0 ffffff800d9c5e00 0 0

ffffff800d9c5f80 stream 0 0 0 ffffff800d9c6040 0 0 /var/run/mDNSResponder

ffffff800d9c6040 stream 0 0 0 ffffff800d9c5f80 0 0

ffffff800d9c6100 stream 0 0 0 ffffff800d9c61c0 0 0 /var/run/mDNSResponder

ffffff800d9c61c0 stream 0 0 0 ffffff800d9c6100 0 0

ffffff800d9c6280 stream 0 0 0 ffffff800d9c6340 0 0 /var/run/mDNSResponder

ffffff800d9c6340 stream 0 0 0 ffffff800d9c6280 0 0

ffffff800d9c6400 stream 0 0 0 ffffff800d9c64c0 0 0 /var/run/mDNSResponder

ffffff800d9c64c0 stream 0 0 0 ffffff800d9c6400 0 0

ffffff800c36ab80 stream 0 0 0 ffffff800bda9300 0 0 /var/run/mDNSResponder

ffffff800bda9300 stream 0 0 0 ffffff800c36ab80 0 0

ffffff800c36a1c0 stream 0 0 0 ffffff800c369140 0 0 /var/run/mDNSResponder

ffffff800c369140 stream 0 0 0 ffffff800c36a1c0 0 0

ffffff800d9c6700 stream 0 0 0 ffffff800d9c6880 0 0 /var/run/mDNSResponder

ffffff800d9c6880 stream 0 0 0 ffffff800d9c6700 0 0

ffffff800c368900 stream 0 0 ffffff800de9a550 0 0 0 /tmp/icssuis502

ffffff800c3692c0 stream 0 0 0 ffffff800c369ec0 0 0 /var/run/mDNSResponder

ffffff800c369ec0 stream 0 0 0 ffffff800c3692c0 0 0

ffffff800d9c6e80 stream 0 0 0 ffffff800d9c6d00 0 0 /var/run/usbmuxd

ffffff800d9c6d00 stream 0 0 0 ffffff800d9c6e80 0 0

ffffff800c3683c0 stream 0 0 0 ffffff800c368540 0 0 /var/run/mDNSResponder

ffffff800c368540 stream 0 0 0 ffffff800c3683c0 0 0

ffffff800bdaa080 stream 0 0 0 ffffff800bda9d80 0 0 /var/run/mDNSResponder

ffffff800bda9d80 stream 0 0 0 ffffff800bdaa080 0 0

ffffff800bda9480 stream 0 0 0 ffffff800bda9780 0 0 /var/run/mDNSResponder

ffffff800bda9780 stream 0 0 0 ffffff800bda9480 0 0

ffffff800bda9000 stream 0 0 0 ffffff800c36a580 0 0

ffffff800c36a580 stream 0 0 0 ffffff800bda9000 0 0

ffffff800c36a280 stream 0 0 0 ffffff800c36ad00 0 0

ffffff800c36ad00 stream 0 0 0 ffffff800c36a280 0 0

ffffff800c36aa00 stream 0 0 0 ffffff800c36a880 0 0

ffffff800c36a880 stream 0 0 0 ffffff800c36aa00 0 0

ffffff800c369b00 stream 0 0 0 ffffff800c369500 0 0

ffffff800c369500 stream 0 0 0 ffffff800c369b00 0 0

ffffff800c369f80 stream 0 0 ffffff800d57f1f0 0 0 0 /tmp/launch-Uw8Fqt/org.x:0

ffffff800c368cc0 stream 0 0 ffffff800d57f3e0 0 0 0 /tmp/launch-5PRrer/Listeners

ffffff800c369680 stream 0 0 ffffff800d57f5d0 0 0 0 /tmp/launch-JsZCof/Render

ffffff800c369080 stream 0 0 ffffff800d57fe88 0 0 0 /tmp/launchd-95.uZCVf1/sock

ffffff800c369800 stream 0 0 0 ffffff800c369380 0 0

ffffff800c369380 stream 0 0 0 ffffff800c369800 0 0

ffffff800c368d80 stream 0 0 0 ffffff800c369440 0 0

ffffff800c369440 stream 0 0 0 ffffff800c368d80 0 0

ffffff800c368fc0 stream 0 0 0 ffffff800c369740 0 0

ffffff800c369740 stream 0 0 0 ffffff800c368fc0 0 0

ffffff800c36aac0 stream 0 0 0 ffffff800bdaa2c0 0 0

ffffff800bdaa2c0 stream 0 0 0 ffffff800c36aac0 0 0

ffffff800bdaa680 stream 0 0 0 ffffff800bda9b40 0 0

ffffff800bda9b40 stream 0 0 0 ffffff800bdaa680 0 0

ffffff800bda99c0 stream 0 0 0 ffffff800bda9240 0 0 /var/run/mDNSResponder

ffffff800bda9240 stream 0 0 0 ffffff800bda99c0 0 0

ffffff800bda96c0 stream 0 0 0 ffffff800c36a4c0 0 0

ffffff800c36a4c0 stream 0 0 0 ffffff800bda96c0 0 0

ffffff800c368e40 stream 0 0 ffffff800c57fc98 0 0 0 /var/run/pppconfd

ffffff800c36a340 stream 0 0 0 ffffff800c36a400 0 0

ffffff800c36a400 stream 0 0 0 ffffff800c36a340 0 0

ffffff800c36a640 stream 0 0 0 ffffff800c36a700 0 0

ffffff800c36a700 stream 0 0 0 ffffff800c36a640 0 0

ffffff800c36adc0 stream 0 0 0 ffffff800c36ae80 0 0

ffffff800c36ae80 stream 0 0 0 ffffff800c36adc0 0 0

ffffff800bda90c0 stream 0 0 0 ffffff800bda9180 0 0

ffffff800bda9180 stream 0 0 0 ffffff800bda90c0 0 0

ffffff800bda9840 stream 0 0 0 ffffff800bda9900 0 0

ffffff800bda9900 stream 0 0 0 ffffff800bda9840 0 0

ffffff800bda9e40 stream 0 0 0 ffffff800bda9f00 0 0

ffffff800bda9f00 stream 0 0 0 ffffff800bda9e40 0 0

ffffff800bdaa800 stream 0 0 0 ffffff800bdaa740 0 0

ffffff800bdaa740 stream 0 0 0 ffffff800bdaa800 0 0

ffffff800bdaa8c0 stream 0 0 0 ffffff800bdaa980 0 0

ffffff800bdaa980 stream 0 0 0 ffffff800bdaa8c0 0 0

ffffff800bdaab00 stream 0 0 0 ffffff800bdaaa40 0 0 /var/tmp/launchd/sock

ffffff800bdaaa40 stream 0 0 0 ffffff800bdaab00 0 0

ffffff800bdaabc0 stream 0 0 0 ffffff800bdaac80 0 0

ffffff800bdaac80 stream 0 0 0 ffffff800bdaabc0 0 0

ffffff800bdaae00 stream 0 0 0 ffffff800bdaad40 0 0 /var/tmp/launchd/sock

ffffff800bdaad40 stream 0 0 0 ffffff800bdaae00 0 0

ffffff800bdaaf80 stream 0 0 0 ffffff800bdaaec0 0 0

ffffff800bdaaec0 stream 0 0 0 ffffff800bdaaf80 0 0

ffffff800bdab100 stream 0 0 0 ffffff800bdab040 0 0

ffffff800bdab040 stream 0 0 0 ffffff800bdab100 0 0

ffffff800bdab280 stream 0 0 0 ffffff800bdab1c0 0 0

ffffff800bdab1c0 stream 0 0 0 ffffff800bdab280 0 0

ffffff800bdab400 stream 0 0 0 ffffff800bdab340 0 0

ffffff800bdab340 stream 0 0 0 ffffff800bdab400 0 0

ffffff800bdab4c0 stream 0 0 0 ffffff800bdab580 0 0

ffffff800bdab580 stream 0 0 0 ffffff800bdab4c0 0 0

ffffff800bdab7c0 stream 0 0 ffffff800c110740 0 0 0 /var/tmp/launchd/sock

ffffff800bdab880 stream 0 0 ffffff800c110930 0 0 0 /private/var/run/cupsd

ffffff800bdab940 stream 0 0 ffffff800c110c18 0 0 0 /var/run/usbmuxd

ffffff800bdabac0 stream 0 0 ffffff800c110e08 0 0 0 /var/run/asl_input

ffffff800bdabb80 stream 0 0 ffffff800c110f00 0 0 0 /var/run/SCHelper

ffffff800bdabc40 stream 0 0 ffffff800c0f6000 0 0 0 /var/run/vpncontrol.sock

ffffff800bdabd00 stream 0 0 ffffff800c0f60f8 0 0 0 /private/var/run/printtool

ffffff800bdabdc0 stream 0 0 ffffff800c0f61f0 0 0 0 /var/run/portmap.socket

ffffff800bdabf40 stream 0 0 ffffff800c0f62e8 0 0 0 /var/run/mDNSResponder

ffffff800bdabe80 stream 0 0 ffffff800c0f63e0 0 0 0 /var/run/com.apple.ActivityMonitor.socket

ffffff80119bca00 dgram 0 0 0 ffffff80119bbd40 ffffff80119bbd40 0

ffffff80119bbd40 dgram 0 0 0 ffffff80119bca00 ffffff80119bca00 0

ffffff80119bb680 dgram 0 0 0 ffffff80119bc7c0 ffffff80119bc7c0 0

ffffff80119bc7c0 dgram 0 0 0 ffffff80119bb680 ffffff80119bb680 0

ffffff800d9c5980 dgram 0 0 0 ffffff800bda9fc0 ffffff800bda9fc0 0

ffffff800bda9fc0 dgram 0 0 0 ffffff800d9c5980 ffffff800d9c5980 0

ffffff800d9c6ac0 dgram 0 0 0 ffffff800d9c4cc0 ffffff800d9c4cc0 0

ffffff800d9c4cc0 dgram 0 0 0 ffffff800d9c6ac0 ffffff800d9c6ac0 0

ffffff800d9c4540 dgram 0 0 0 ffffff800d9c4f00 ffffff800d9c4f00 0

ffffff800d9c4f00 dgram 0 0 0 ffffff800d9c4540 ffffff800d9c4540 0

ffffff800d9c6580 dgram 0 0 0 ffffff800d9c6640 ffffff800d9c6640 0

ffffff800d9c6640 dgram 0 0 0 ffffff800d9c6580 ffffff800d9c6580 0

ffffff800c368180 dgram 0 0 0 ffffff800d9c6b80 ffffff800d9c6b80 0

ffffff800d9c6b80 dgram 0 0 0 ffffff800c368180 ffffff800c368180 0

ffffff800d9c6a00 dgram 0 0 0 ffffff800c368000 ffffff800c368000 0

ffffff800c368000 dgram 0 0 0 ffffff800d9c6a00 ffffff800d9c6a00 0

ffffff800c3686c0 dgram 0 0 0 ffffff800d9c6dc0 ffffff800d9c6dc0 0

ffffff800d9c6dc0 dgram 0 0 0 ffffff800c3686c0 ffffff800c3686c0 0

ffffff800c3689c0 dgram 0 0 0 ffffff800c368a80 ffffff800c368a80 0

ffffff800c368a80 dgram 0 0 0 ffffff800c3689c0 ffffff800c3689c0 0

ffffff800bda9c00 dgram 0 0 0 ffffff800bda9a80 ffffff800bda9a80 0

ffffff800bda9a80 dgram 0 0 0 ffffff800bda9c00 ffffff800bda9c00 0

ffffff800c3698c0 dgram 0 0 0 ffffff800c36a7c0 ffffff800c36a7c0 0

ffffff800c36a7c0 dgram 0 0 0 ffffff800c3698c0 ffffff800c3698c0 0

ffffff800c36af40 dgram 0 0 0 ffffff800c36a040 ffffff800c36a040 0

ffffff800c36a040 dgram 0 0 0 ffffff800c36af40 ffffff800c36af40 0

ffffff800bda93c0 dgram 0 0 0 ffffff800c36a940 ffffff800c36a940 0

ffffff800c36a940 dgram 0 0 0 ffffff800bda93c0 ffffff800bda93c0 0

ffffff800bdaa440 dgram 0 0 0 ffffff800bdaa500 ffffff800bdaa500 0

ffffff800bdaa500 dgram 0 0 0 ffffff800bdaa440 ffffff800bdaa440 0

ffffff800bdaba00 dgram 0 0 ffffff800c110d10 0 0 0 /var/run/syslog


______________


from today

netstat


Active Internet connections

Proto Recv-Q Send-Q Local Address Foreign Address (state)


tcp4 0 2119 XXXXXXXXX.2.54746 lax02s01-in-f21..https ESTABLISHED

tcp4 0 762 XXXXXXXXX.2.54745 v-d-1b.sjc.dropb.https ESTABLISHED

tcp4 0 0 XXXXXXXXX.2.54741 sjc-not1.sjc.dro.http ESTABLISHED

tcp4 37 0 XXXXXXXXX.6.54707 ec2-107-20-249-2.https CLOSE_WAIT

tcp4 37 0 XXXXXXXXX.6.54706 ec2-107-20-249-1.https CLOSE_WAIT

tcp4 37 0 XXXXXXXXX.6.54705 v-client-1a.sjc..https CLOSE_WAIT

tcp4 37 0 XXXXXXXXX.6.54702 199.47.217.178.https CLOSE_WAIT

tcp4 37 0 10.0.1.6.54521 v-client-2a.sjc..https CLOSE_WAIT

tcp4 0 0 localhost.26165 localhost.50379 ESTABLISHED

tcp4 0 0 localhost.50379 localhost.26165 ESTABLISHED

tcp4 37 0 10.0.1.6.49394 ec2-107-20-249-1.https CLOSE_WAIT

tcp4 0 0 XXXXXXXXX.2.54743 69.58.188.38.https TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.54725 lax04s08-in-f19..https TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.54744 r-199-59-148-10..http TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.54742 69.58.188.38.https TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.54724 lax04s08-in-f19..https TIME_WAIT

udp4 0 0 XXXXXXXXX.2.ntp *.*

udp6 0 0 *.53780 *.*

udp4 0 0 *.53780 *.*

udp6 0 0 *.62813 *.*

udp4 0 0 *.62813 *.*

udp6 0 0 *.63440 *.*

udp4 0 0 *.63440 *.*

udp6 0 0 *.56188 *.*

udp4 0 0 *.56188 *.*

udp6 0 0 *.55626 *.*

udp4 0 0 *.55626 *.*

udp6 0 0 *.56269 *.*

udp4 0 0 *.56269 *.*

udp6 0 0 sp.ntp *.*

udp4 0 0 *.* *.*

udp4 0 0 *.17500 *.*

udp4 0 0 localhost.ntp *.*

udp6 0 0 localhost.ntp *.*

udp6 0 0 localhost.ntp *.*

udp6 0 0 *.ntp *.*

udp4 0 0 *.ntp *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

udp6 0 0 *.mdns *.*

udp4 0 0 *.mdns *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

icm4 0 0 *.* *.*

icm6 0 0 *.* *.*

Active LOCAL (UNIX) domain sockets

Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr

ffffff80119bba40 stream 0 0 0 ffffff80119ba900 0 0

ffffff80119ba900 stream 0 0 0 ffffff80119bba40 0 0

ffffff800d9c4180 stream 0 0 0 ffffff800c369a40 0 0 /var/tmp/launchd/sock

ffffff800c369a40 stream 0 0 0 ffffff800d9c4180 0 0

ffffff800c369200 stream 0 0 0 ffffff800d9c40c0 0 0

ffffff800d9c40c0 stream 0 0 0 ffffff800c369200 0 0

ffffff800c369980 stream 0 0 0 ffffff800d9c52c0 0 0 /private/var/run/cupsd

ffffff800d9c52c0 stream 0 0 0 ffffff800c369980 0 0

ffffff80119bc700 stream 0 0 0 ffffff80119baa80 0 0 /var/run/mDNSResponder

ffffff80119baa80 stream 0 0 0 ffffff80119bc700 0 0

ffffff800d9c4600 stream 0 0 0 ffffff80119bad80 0 0 /var/run/mDNSResponder

ffffff80119bad80 stream 0 0 0 ffffff800d9c4600 0 0

ffffff800d9c5b00 stream 0 0 0 ffffff800c369d40 0 0 /var/run/mDNSResponder

ffffff800c369d40 stream 0 0 0 ffffff800d9c5b00 0 0

ffffff800c369c80 stream 0 0 0 0 0 0

ffffff80119bcf40 stream 0 0 0 ffffff80119bce80 0 0 /.dbfseventsd

ffffff80119bce80 stream 0 0 0 ffffff80119bcf40 0 0

ffffff800d9c4000 stream 0 0 ffffff800fcd81f0 0 0 0 /.dbfseventsd

ffffff800bda9540 stream 0 0 0 ffffff800d9c4fc0 0 0

ffffff800d9c4fc0 stream 0 0 0 ffffff800bda9540 0 0

ffffff800d9c4300 stream 0 0 0 ffffff800d9c4240 0 0 /tmp/launchd-95.uZCVf1/sock

ffffff800d9c4240 stream 0 0 0 ffffff800d9c4300 0 0

ffffff800d9c43c0 stream 0 0 0 ffffff800d9c4480 0 0

ffffff800d9c4480 stream 0 0 0 ffffff800d9c43c0 0 0

ffffff800d9c5140 stream 0 0 0 ffffff800d9c5080 0 0 /var/run/mDNSResponder

ffffff800d9c5080 stream 0 0 0 ffffff800d9c5140 0 0

ffffff800c36a100 stream 0 0 0 ffffff800bda9600 0 0 /var/run/mDNSResponder

ffffff800bda9600 stream 0 0 0 ffffff800c36a100 0 0

ffffff800c369bc0 stream 0 0 0 ffffff800bda9cc0 0 0 /var/tmp/launchd/sock

ffffff800bda9cc0 stream 0 0 0 ffffff800c369bc0 0 0

ffffff800c368840 stream 0 0 0 ffffff800d9c6940 0 0 /var/run/mDNSResponder

ffffff800d9c6940 stream 0 0 0 ffffff800c368840 0 0

ffffff800bdaa200 stream 0 0 0 ffffff800bdaa140 0 0 /var/run/mDNSResponder

ffffff800bdaa140 stream 0 0 0 ffffff800bdaa200 0 0

ffffff800d9c5e00 stream 0 0 0 ffffff800d9c5ec0 0 0 /var/run/usbmuxd

ffffff800d9c5ec0 stream 0 0 0 ffffff800d9c5e00 0 0

ffffff800d9c5f80 stream 0 0 0 ffffff800d9c6040 0 0 /var/run/mDNSResponder

ffffff800d9c6040 stream 0 0 0 ffffff800d9c5f80 0 0

ffffff800d9c6100 stream 0 0 0 ffffff800d9c61c0 0 0 /var/run/mDNSResponder

ffffff800d9c61c0 stream 0 0 0 ffffff800d9c6100 0 0

ffffff800d9c6280 stream 0 0 0 ffffff800d9c6340 0 0 /var/run/mDNSResponder

ffffff800d9c6340 stream 0 0 0 ffffff800d9c6280 0 0

ffffff800d9c6400 stream 0 0 0 ffffff800d9c64c0 0 0 /var/run/mDNSResponder

ffffff800d9c64c0 stream 0 0 0 ffffff800d9c6400 0 0

ffffff800c36ab80 stream 0 0 0 ffffff800bda9300 0 0 /var/run/mDNSResponder

ffffff800bda9300 stream 0 0 0 ffffff800c36ab80 0 0

ffffff800c36a1c0 stream 0 0 0 ffffff800c369140 0 0 /var/run/mDNSResponder

ffffff800c369140 stream 0 0 0 ffffff800c36a1c0 0 0

ffffff800d9c6700 stream 0 0 0 ffffff800d9c6880 0 0 /var/run/mDNSResponder

ffffff800d9c6880 stream 0 0 0 ffffff800d9c6700 0 0

ffffff800c368900 stream 0 0 ffffff800de9a550 0 0 0 /tmp/icssuis502

ffffff800c3692c0 stream 0 0 0 ffffff800c369ec0 0 0 /var/run/mDNSResponder

ffffff800c369ec0 stream 0 0 0 ffffff800c3692c0 0 0

ffffff800d9c6e80 stream 0 0 0 ffffff800d9c6d00 0 0 /var/run/usbmuxd

ffffff800d9c6d00 stream 0 0 0 ffffff800d9c6e80 0 0

ffffff800c3683c0 stream 0 0 0 ffffff800c368540 0 0 /var/run/mDNSResponder

ffffff800c368540 stream 0 0 0 ffffff800c3683c0 0 0

ffffff800bdaa080 stream 0 0 0 ffffff800bda9d80 0 0 /var/run/mDNSResponder

ffffff800bda9d80 stream 0 0 0 ffffff800bdaa080 0 0

ffffff800bda9480 stream 0 0 0 ffffff800bda9780 0 0 /var/run/mDNSResponder

ffffff800bda9780 stream 0 0 0 ffffff800bda9480 0 0

ffffff800bda9000 stream 0 0 0 ffffff800c36a580 0 0

ffffff800c36a580 stream 0 0 0 ffffff800bda9000 0 0

ffffff800c36a280 stream 0 0 0 ffffff800c36ad00 0 0

ffffff800c36ad00 stream 0 0 0 ffffff800c36a280 0 0

ffffff800c36aa00 stream 0 0 0 ffffff800c36a880 0 0

ffffff800c36a880 stream 0 0 0 ffffff800c36aa00 0 0

ffffff800c369b00 stream 0 0 0 ffffff800c369500 0 0

ffffff800c369500 stream 0 0 0 ffffff800c369b00 0 0

ffffff800c369f80 stream 0 0 ffffff800d57f1f0 0 0 0 /tmp/launch-Uw8Fqt/org.x:0

ffffff800c368cc0 stream 0 0 ffffff800d57f3e0 0 0 0 /tmp/launch-5PRrer/Listeners

ffffff800c369680 stream 0 0 ffffff800d57f5d0 0 0 0 /tmp/launch-JsZCof/Render

ffffff800c369080 stream 0 0 ffffff800d57fe88 0 0 0 /tmp/launchd-95.uZCVf1/sock

ffffff800c369800 stream 0 0 0 ffffff800c369380 0 0

ffffff800c369380 stream 0 0 0 ffffff800c369800 0 0

ffffff800c368d80 stream 0 0 0 ffffff800c369440 0 0

ffffff800c369440 stream 0 0 0 ffffff800c368d80 0 0

ffffff800c368fc0 stream 0 0 0 ffffff800c369740 0 0

ffffff800c369740 stream 0 0 0 ffffff800c368fc0 0 0

ffffff800c36aac0 stream 0 0 0 ffffff800bdaa2c0 0 0

ffffff800bdaa2c0 stream 0 0 0 ffffff800c36aac0 0 0

ffffff800bdaa680 stream 0 0 0 ffffff800bda9b40 0 0

ffffff800bda9b40 stream 0 0 0 ffffff800bdaa680 0 0

ffffff800bda99c0 stream 0 0 0 ffffff800bda9240 0 0 /var/run/mDNSResponder

ffffff800bda9240 stream 0 0 0 ffffff800bda99c0 0 0

ffffff800bda96c0 stream 0 0 0 ffffff800c36a4c0 0 0

ffffff800c36a4c0 stream 0 0 0 ffffff800bda96c0 0 0

ffffff800c368e40 stream 0 0 ffffff800c57fc98 0 0 0 /var/run/pppconfd

ffffff800c36a340 stream 0 0 0 ffffff800c36a400 0 0

ffffff800c36a400 stream 0 0 0 ffffff800c36a340 0 0

ffffff800c36a640 stream 0 0 0 ffffff800c36a700 0 0

ffffff800c36a700 stream 0 0 0 ffffff800c36a640 0 0

ffffff800c36adc0 stream 0 0 0 ffffff800c36ae80 0 0

ffffff800c36ae80 stream 0 0 0 ffffff800c36adc0 0 0

ffffff800bda90c0 stream 0 0 0 ffffff800bda9180 0 0

ffffff800bda9180 stream 0 0 0 ffffff800bda90c0 0 0

ffffff800bda9840 stream 0 0 0 ffffff800bda9900 0 0

ffffff800bda9900 stream 0 0 0 ffffff800bda9840 0 0

ffffff800bda9e40 stream 0 0 0 ffffff800bda9f00 0 0

ffffff800bda9f00 stream 0 0 0 ffffff800bda9e40 0 0

ffffff800bdaa800 stream 0 0 0 ffffff800bdaa740 0 0

ffffff800bdaa740 stream 0 0 0 ffffff800bdaa800 0 0

ffffff800bdaa8c0 stream 0 0 0 ffffff800bdaa980 0 0

ffffff800bdaa980 stream 0 0 0 ffffff800bdaa8c0 0 0

ffffff800bdaab00 stream 0 0 0 ffffff800bdaaa40 0 0 /var/tmp/launchd/sock

ffffff800bdaaa40 stream 0 0 0 ffffff800bdaab00 0 0

ffffff800bdaabc0 stream 0 0 0 ffffff800bdaac80 0 0

ffffff800bdaac80 stream 0 0 0 ffffff800bdaabc0 0 0

ffffff800bdaae00 stream 0 0 0 ffffff800bdaad40 0 0 /var/tmp/launchd/sock

ffffff800bdaad40 stream 0 0 0 ffffff800bdaae00 0 0

ffffff800bdaaf80 stream 0 0 0 ffffff800bdaaec0 0 0

ffffff800bdaaec0 stream 0 0 0 ffffff800bdaaf80 0 0

ffffff800bdab100 stream 0 0 0 ffffff800bdab040 0 0

ffffff800bdab040 stream 0 0 0 ffffff800bdab100 0 0

ffffff800bdab280 stream 0 0 0 ffffff800bdab1c0 0 0

ffffff800bdab1c0 stream 0 0 0 ffffff800bdab280 0 0

ffffff800bdab400 stream 0 0 0 ffffff800bdab340 0 0

ffffff800bdab340 stream 0 0 0 ffffff800bdab400 0 0

ffffff800bdab4c0 stream 0 0 0 ffffff800bdab580 0 0

ffffff800bdab580 stream 0 0 0 ffffff800bdab4c0 0 0

ffffff800bdab7c0 stream 0 0 ffffff800c110740 0 0 0 /var/tmp/launchd/sock

ffffff800bdab880 stream 0 0 ffffff800c110930 0 0 0 /private/var/run/cupsd

ffffff800bdab940 stream 0 0 ffffff800c110c18 0 0 0 /var/run/usbmuxd

ffffff800bdabac0 stream 0 0 ffffff800c110e08 0 0 0 /var/run/asl_input

ffffff800bdabb80 stream 0 0 ffffff800c110f00 0 0 0 /var/run/SCHelper

ffffff800bdabc40 stream 0 0 ffffff800c0f6000 0 0 0 /var/run/vpncontrol.sock

ffffff800bdabd00 stream 0 0 ffffff800c0f60f8 0 0 0 /private/var/run/printtool

ffffff800bdabdc0 stream 0 0 ffffff800c0f61f0 0 0 0 /var/run/portmap.socket

ffffff800bdabf40 stream 0 0 ffffff800c0f62e8 0 0 0 /var/run/mDNSResponder

ffffff800bdabe80 stream 0 0 ffffff800c0f63e0 0 0 0 /var/run/com.apple.ActivityMonitor.socket

ffffff80119bca00 dgram 0 0 0 ffffff80119bbd40 ffffff80119bbd40 0

ffffff80119bbd40 dgram 0 0 0 ffffff80119bca00 ffffff80119bca00 0

ffffff80119bb680 dgram 0 0 0 ffffff80119bc7c0 ffffff80119bc7c0 0

ffffff80119bc7c0 dgram 0 0 0 ffffff80119bb680 ffffff80119bb680 0

ffffff800d9c5980 dgram 0 0 0 ffffff800bda9fc0 ffffff800bda9fc0 0

ffffff800bda9fc0 dgram 0 0 0 ffffff800d9c5980 ffffff800d9c5980 0

ffffff800d9c6ac0 dgram 0 0 0 ffffff800d9c4cc0 ffffff800d9c4cc0 0

ffffff800d9c4cc0 dgram 0 0 0 ffffff800d9c6ac0 ffffff800d9c6ac0 0

ffffff800d9c4540 dgram 0 0 0 ffffff800d9c4f00 ffffff800d9c4f00 0

ffffff800d9c4f00 dgram 0 0 0 ffffff800d9c4540 ffffff800d9c4540 0

ffffff800d9c6580 dgram 0 0 0 ffffff800d9c6640 ffffff800d9c6640 0

ffffff800d9c6640 dgram 0 0 0 ffffff800d9c6580 ffffff800d9c6580 0

ffffff800c368180 dgram 0 0 0 ffffff800d9c6b80 ffffff800d9c6b80 0

ffffff800d9c6b80 dgram 0 0 0 ffffff800c368180 ffffff800c368180 0

ffffff800d9c6a00 dgram 0 0 0 ffffff800c368000 ffffff800c368000 0

ffffff800c368000 dgram 0 0 0 ffffff800d9c6a00 ffffff800d9c6a00 0

ffffff800c3686c0 dgram 0 0 0 ffffff800d9c6dc0 ffffff800d9c6dc0 0

ffffff800d9c6dc0 dgram 0 0 0 ffffff800c3686c0 ffffff800c3686c0 0

ffffff800c3689c0 dgram 0 0 0 ffffff800c368a80 ffffff800c368a80 0

ffffff800c368a80 dgram 0 0 0 ffffff800c3689c0 ffffff800c3689c0 0

ffffff800bda9c00 dgram 0 0 0 ffffff800bda9a80 ffffff800bda9a80 0

ffffff800bda9a80 dgram 0 0 0 ffffff800bda9c00 ffffff800bda9c00 0

ffffff800c3698c0 dgram 0 0 0 ffffff800c36a7c0 ffffff800c36a7c0 0

ffffff800c36a7c0 dgram 0 0 0 ffffff800c3698c0 ffffff800c3698c0 0

ffffff800c36af40 dgram 0 0 0 ffffff800c36a040 ffffff800c36a040 0

ffffff800c36a040 dgram 0 0 0 ffffff800c36af40 ffffff800c36af40 0

ffffff800bda93c0 dgram 0 0 0 ffffff800c36a940 ffffff800c36a940 0

ffffff800c36a940 dgram 0 0 0 ffffff800bda93c0 ffffff800bda93c0 0

ffffff800bdaa440 dgram 0 0 0 ffffff800bdaa500 ffffff800bdaa500 0

ffffff800bdaa500 dgram 0 0 0 ffffff800bdaa440 ffffff800bdaa440 0

ffffff800bdaba00 dgram 0 0 ffffff800c110d10 0 0 0 /var/run/syslog



_______


from a few days ago....


Proto Recv-Q Send-Q Local Address Foreign Address (state)

tcp4 0 0 this is my ip address.52622 69.58.188.37.https SYN_SENT

tcp4 0 0 this is my ip address.52621 64.151.73.102.se.http SYN_SENT

tcp4 0 0 this is my ip address.52620 69.58.188.37.https SYN_SENT

tcp4 0 0 this is my ip address.52619 *.dmtracker.com.http SYN_SENT

tcp4 0 0 this is my ip address.52618 *.dmtracker.com.http SYN_SENT

tcp4 0 0 this is my ip address.52617 *.dmtracker.com.http SYN_SENT

tcp4 0 0 this is my ip address.52616 24.143.207.9.http SYN_SENT

tcp4 0 0 this is my ip address.52615 24.143.207.9.http SYN_SENT

tcp4 0 0 this is my ip address.52614 24.143.207.9.http SYN_SENT

tcp4 0 0 this is my ip address.52613 24.143.207.233.http SYN_SENT

tcp4 0 0 this is my ip address.52610 lax02s01-in-f31..https SYN_SENT

tcp4 0 0 this is my ip address.52609 lax02s01-in-f31..https SYN_SENT

tcp4 0 0 this is my ip address.52606 merlin.socialkno.http SYN_SENT

tcp4 0 0 this is my ip address.52605 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52604 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52603 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52602 50.97.209.196-st.http SYN_SENT

tcp4 0 0 this is my ip address.52601 50.97.209.196-st.http SYN_SENT

tcp4 0 0 this is my ip address.52600 50.97.209.196-st.http SYN_SENT

tcp4 0 0 this is my ip address.52599 96.31.78.174.http SYN_SENT

tcp4 0 0 this is my ip address.52598 96.31.78.174.http SYN_SENT

tcp4 0 0 this is my ip address.52597 96.31.78.174.http SYN_SENT

tcp4 0 0 this is my ip address.52596 ec2-50-18-152-20.http SYN_SENT

tcp4 0 0 this is my ip address.52595 ec2-50-18-152-20.http SYN_SENT

tcp4 0 0 this is my ip address.52594 ec2-50-18-152-20.http SYN_SENT

tcp4 0 0 this is my ip address.52593 67.201.31.64.http SYN_SENT

tcp4 0 0 this is my ip address.52592 67.201.31.64.http SYN_SENT

tcp4 0 0 this is my ip address.52591 67.201.31.64.http SYN_SENT

tcp4 0 0 this is my ip address.52590 95.172.27.51.http SYN_SENT

tcp4 0 0 this is my ip address.52589 95.172.27.51.http SYN_SENT

tcp4 0 0 this is my ip address.52588 95.172.27.51.http SYN_SENT

tcp4 0 0 this is my ip address.52587 64.210.61.151.http SYN_SENT

tcp4 0 0 this is my ip address.52586 64.210.61.151.http SYN_SENT

tcp4 0 0 this is my ip address.52585 64.210.61.151.http SYN_SENT

tcp4 0 0 this is my ip address.52584 ec2-50-18-152-20.http SYN_SENT

tcp4 0 0 this is my ip address.52583 ec2-50-18-152-20.http SYN_SENT

tcp4 0 0 this is my ip address.52582 ec2-50-18-152-20.http SYN_SENT

tcp4 0 0 this is my ip address.52581 merlin.socialkno.http SYN_SENT

tcp4 0 0 this is my ip address.52580 merlin.socialkno.http SYN_SENT

tcp4 0 0 this is my ip address.52579 merlin.socialkno.http SYN_SENT

tcp4 0 0 this is my ip address.52578 merlin.socialkno.http SYN_SENT

tcp4 0 0 this is my ip address.52577 24.143.207.227.http SYN_SENT

tcp4 0 0 this is my ip address.52576 24.143.207.227.http SYN_SENT

tcp4 0 0 this is my ip address.52575 204.232.137.207.http SYN_SENT

tcp4 0 0 this is my ip address.52574 204.232.137.207.http SYN_SENT

tcp4 0 0 this is my ip address.52573 204.232.137.207.http SYN_SENT

tcp4 0 0 this is my ip address.52572 204.232.137.207.http SYN_SENT

tcp4 0 0 this is my ip address.52571 lax02s01-in-f18..https SYN_SENT

tcp4 0 0 this is my ip address.52570 lax02s01-in-f18..https SYN_SENT

tcp4 0 0 this is my ip address.52569 24.143.207.233.http SYN_SENT

tcp4 0 0 this is my ip address.52568 www-12-01-prn1.f.https SYN_SENT

tcp4 0 0 this is my ip address.52567 a184-24-29-177.d.https SYN_SENT

tcp4 0 0 this is my ip address.52566 24.143.207.233.http SYN_SENT

tcp4 0 0 this is my ip address.52565 a184-24-29-177.d.https SYN_SENT

tcp4 0 0 this is my ip address.52564 a184-24-29-177.d.https SYN_SENT

tcp4 0 0 this is my ip address.52563 a184-24-29-177.d.https SYN_SENT

tcp4 0 0 this is my ip address.52562 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52561 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52560 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52559 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52558 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52557 24.143.207.34.http SYN_SENT

tcp4 0 0 this is my ip address.52556 24.143.207.34.http SYN_SENT

tcp4 0 0 this is my ip address.52555 24.143.207.34.http SYN_SENT

tcp4 0 0 this is my ip address.52554 24.143.207.34.http SYN_SENT

tcp4 0 0 this is my ip address.52553 24.143.207.34.http SYN_SENT

tcp4 0 0 this is my ip address.52552 24.143.207.34.http SYN_SENT

tcp4 0 0 this is my ip address.52551 24.143.207.227.http SYN_SENT

tcp4 0 0 this is my ip address.52550 24.143.207.227.http SYN_SENT

tcp4 0 0 this is my ip address.52549 24.143.207.227.http SYN_SENT

tcp4 0 0 this is my ip address.52548 24.143.207.227.http SYN_SENT

tcp4 0 0 this is my ip address.52547 8.19.18.191.http SYN_SENT

tcp4 0 0 this is my ip address.52546 8.19.18.191.http SYN_SENT

tcp4 0 0 this is my ip address.52545 8.19.18.191.http SYN_SENT

tcp4 0 0 this is my ip address.52544 24.143.207.17.http SYN_SENT

tcp4 0 0 this is my ip address.52543 24.143.207.17.http SYN_SENT

tcp4 0 0 this is my ip address.52542 24.143.207.17.http SYN_SENT

tcp4 0 0 this is my ip address.52541 24.143.207.17.http SYN_SENT

tcp4 0 0 this is my ip address.52540 24.143.207.17.http SYN_SENT

tcp4 0 0 this is my ip address.52539 24.143.207.17.http SYN_SENT

tcp4 0 0 this is my ip address.52538 www-12-01-prn1.f.https SYN_SENT

tcp4 0 0 this is my ip address.52537 www-12-01-prn1.f.https SYN_SENT

tcp4 0 0 this is my ip address.52536 www-12-01-prn1.f.https SYN_SENT

tcp4 0 0 this is my ip address.52535 ec2-50-16-77-206.http SYN_SENT

tcp4 0 0 this is my ip address.52534 ec2-50-16-77-206.http SYN_SENT

tcp4 0 0 this is my ip address.52533 ec2-50-16-77-206.http SYN_SENT

tcp4 0 0 this is my ip address.52532 75.126.109.204-s.http SYN_SENT

tcp4 0 0 this is my ip address.52531 75.126.109.204-s.http SYN_SENT

tcp4 0 0 this is my ip address.52530 75.126.109.204-s.http SYN_SENT

tcp4 0 0 this is my ip address.52529 a184-27-192-239..http SYN_SENT

tcp4 0 0 this is my ip address.52528 a184-27-192-239..http SYN_SENT

tcp4 0 0 this is my ip address.52527 a184-27-192-239..http SYN_SENT

tcp4 0 0 this is my ip address.52526 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52525 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52524 24.143.207.32.http SYN_SENT

tcp4 0 0 this is my ip address.52523 lb260.lsag.coten.http SYN_SENT

tcp4 0 0 this is my ip address.52522 lb260.lsag.coten.http SYN_SENT

tcp4 0 0 this is my ip address.52521 lb260.lsag.coten.http SYN_SENT

tcp4 0 0 this is my ip address.52520 lb260.lsag.coten.http SYN_SENT

tcp4 0 0 this is my ip address.52519 lb260.lsag.coten.http SYN_SENT

tcp4 0 0 this is my ip address.52518 lb260.lsag.coten.http SYN_SENT

tcp4 0 0 this is my ip address.52517 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52516 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52515 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52514 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52513 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52512 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52511 a184-27-193-55.d.http SYN_SENT

tcp4 0 0 this is my ip address.52510 a184-27-193-55.d.http SYN_SENT

tcp4 0 0 this is my ip address.52509 a184-27-193-55.d.http SYN_SENT

tcp4 0 0 this is my ip address.52508 a184-27-193-55.d.http SYN_SENT

tcp4 0 0 this is my ip address.52507 a184-27-193-55.d.http SYN_SENT

tcp4 0 0 this is my ip address.52506 a184-27-193-55.d.http SYN_SENT

tcp4 0 0 this is my ip address.52505 pixel.quantserve.http SYN_SENT

tcp4 0 0 this is my ip address.52504 pixel.quantserve.http SYN_SENT

tcp4 0 0 this is my ip address.52503 pixel.quantserve.http SYN_SENT

tcp4 0 0 this is my ip address.52502 www.jobamatic.co.http SYN_SENT

tcp4 0 0 this is my ip address.52501 www.jobamatic.co.http SYN_SENT

tcp4 0 0 this is my ip address.52500 www.jobamatic.co.http SYN_SENT

tcp4 0 0 this is my ip address.52499 209-18-46-114.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52498 209-18-46-114.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52497 209-18-46-114.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52496 209-18-46-105.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52495 209-18-46-105.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52494 209-18-46-105.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52493 209-18-46-105.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52492 209-18-46-105.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52491 209-18-46-105.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52490 209-18-46-105.ad.http SYN_SENT

tcp4 0 0 this is my ip address.52489 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52488 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52487 lax02s01-in-f27..http SYN_SENT

tcp4 0 0 this is my ip address.52486 lax02s02-in-f3.1.http SYN_SENT

tcp4 0 0 this is my ip address.52485 lax02s02-in-f3.1.http SYN_SENT

tcp4 0 0 this is my ip address.52484 lax02s02-in-f3.1.http SYN_SENT

tcp4 0 0 this is my ip address.52483 lax02s01-in-f0.1.http SYN_SENT

tcp4 0 0 this is my ip address.52482 lax02s01-in-f0.1.http SYN_SENT

tcp4 0 0 this is my ip address.52481 lax02s01-in-f0.1.http SYN_SENT

tcp4 0 0 this is my ip address.52480 lax02s01-in-f0.1.http SYN_SENT

tcp4 0 0 this is my ip address.52479 lax02s01-in-f0.1.http SYN_SENT

tcp4 0 0 this is my ip address.52478 lax02s01-in-f0.1.http SYN_SENT

tcp4 0 0 this is my ip address.52477 lax02s01-in-f0.1.http SYN_SENT

tcp4 0 0 this is my ip address.52476 lax04s08-in-f2.1.http SYN_SENT

tcp4 0 0 this is my ip address.52475 lax04s08-in-f2.1.http SYN_SENT

tcp4 0 0 this is my ip address.52474 lax04s08-in-f2.1.http SYN_SENT

tcp4 0 0 this is my ip address.52473 lax04s08-in-f2.1.http SYN_SENT

tcp4 0 0 this is my ip address.52472 lax04s08-in-f2.1.http SYN_SENT

tcp4 0 0 this is my ip address.52471 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52470 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52469 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52468 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52467 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52466 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52465 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52464 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52463 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52462 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52461 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52460 server-216-137-4.http SYN_SENT

tcp4 0 0 this is my ip address.52459 lax02s01-in-f18..http SYN_SENT

tcp4 0 0 this is my ip address.52458 oa-in-f95.1e100..https SYN_SENT

tcp4 0 0 this is my ip address.52457 oa-in-f95.1e100..https SYN_SENT

tcp4 0 0 this is my ip address.52456 oa-in-f95.1e100..https SYN_SENT

tcp4 0 0 this is my ip address.52455 qy-in-f120.1e100.http SYN_SENT

tcp4 0 0 this is my ip address.52454 qy-in-f120.1e100.http SYN_SENT

tcp4 0 0 this is my ip address.52453 qy-in-f120.1e100.http SYN_SENT

tcp4 0 0 this is my ip address.52452 lax02s01-in-f15..http SYN_SENT

tcp4 0 0 this is my ip address.52451 lax02s01-in-f15..http SYN_SENT

tcp4 0 0 this is my ip address.52450 lax02s01-in-f15..http SYN_SENT

tcp4 0 0 this is my ip address.52449 24.143.207.41.http SYN_SENT

tcp4 0 0 this is my ip address.52448 24.143.207.41.http SYN_SENT

tcp4 0 0 this is my ip address.52447 24.143.207.41.http SYN_SENT

tcp4 0 0 this is my ip address.52446 24.143.207.41.http SYN_SENT

tcp4 0 0 this is my ip address.52445 24.143.207.41.http SYN_SENT

tcp4 0 0 this is my ip address.52444 24.143.207.41.http SYN_SENT

tcp4 0 0 this is my ip address.52443 24.143.207.8.http SYN_SENT

tcp4 0 0 this is my ip address.52442 24.143.207.8.http SYN_SENT

tcp4 0 0 this is my ip address.52441 24.143.207.8.http SYN_SENT

tcp4 0 0 this is my ip address.52440 lax02s01-in-f11..http SYN_SENT

tcp4 0 0 this is my ip address.52439 lax02s01-in-f9.1.http SYN_SENT

tcp4 0 0 this is my ip address.52438 lax02s01-in-f9.1.http SYN_SENT

tcp4 0 0 this is my ip address.52437 lax02s01-in-f9.1.http SYN_SENT

tcp4 0 0 this is my ip address.52436 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52435 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52434 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52433 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52432 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52431 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52430 r-199-59-148-87..http SYN_SENT

tcp4 0 0 this is my ip address.52429 r-199-59-148-87..http SYN_SENT

tcp4 0 0 this is my ip address.52428 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52427 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52426 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52425 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52424 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52423 24.143.207.235.http SYN_SENT

tcp4 0 0 this is my ip address.52420 24.143.207.242.http SYN_SENT

tcp4 0 0 this is my ip address.52419 24.143.207.242.http SYN_SENT

tcp4 0 0 this is my ip address.52418 24.143.207.242.http SYN_SENT

tcp4 0 0 this is my ip address.52417 24.143.207.242.http SYN_SENT

tcp4 0 0 this is my ip address.52416 24.143.207.242.http SYN_SENT

tcp4 0 0 this is my ip address.52415 ec2-107-20-223-5.https SYN_SENT

tcp4 0 0 this is my ip address.52414 lax04s08-in-f0.1.https SYN_SENT

tcp4 0 0 this is my ip address.52413 lax04s08-in-f3.1.https SYN_SENT

tcp4 0 0 this is my ip address.52412 vip13.lb40.lsag..http SYN_SENT

tcp4 0 0 this is my ip address.52411 vip13.lb40.lsag..http SYN_SENT

tcp4 0 0 this is my ip address.52410 vip13.lb40.lsag..http SYN_SENT

tcp4 0 0 this is my ip address.52409 vip13.lb40.lsag..http SYN_SENT

tcp4 0 0 this is my ip address.52408 lax04s08-in-f14..https SYN_SENT

tcp4 0 0 this is my ip address.52407 lax04s08-in-f0.1.https SYN_SENT

tcp4 0 0 this is my ip address.52406 lax04s08-in-f0.1.https SYN_SENT

tcp4 0 0 this is my ip address.52405 lax04s08-in-f0.1.https SYN_SENT

tcp4 0 0 this is my ip address.52404 lax04s08-in-f0.1.https SYN_SENT

tcp4 0 0 this is my ip address.52403 lax04s08-in-f3.1.https SYN_SENT

tcp4 0 0 this is my ip address.52402 lax04s08-in-f3.1.https SYN_SENT

tcp4 0 0 this is my ip address.52401 lax04s08-in-f3.1.https SYN_SENT

tcp4 0 0 this is my ip address.52400 lax04s08-in-f14..https SYN_SENT

tcp4 0 0 this is my ip address.52399 lax04s08-in-f14..https SYN_SENT

tcp4 0 0 this is my ip address.52398 66-226-79-24.ded.http SYN_SENT

tcp4 0 0 this is my ip address.52397 66-226-79-24.ded.http SYN_SENT

tcp4 0 0 this is my ip address.52396 66-226-79-24.ded.http SYN_SENT

tcp4 0 0 this is my ip address.52395 66-226-79-24.ded.http SYN_SENT

tcp4 0 0 this is my ip address.52394 66-226-79-24.ded.http SYN_SENT

tcp4 0 0 this is my ip address.52393 66-226-79-24.ded.http SYN_SENT

tcp4 0 0 this is my ip address.52392 www-12-01-prn1.f.http SYN_SENT

tcp4 0 0 this is my ip address.52391 www-12-01-prn1.f.http SYN_SENT

tcp4 0 0 this is my ip address.52390 www-12-01-prn1.f.http SYN_SENT

tcp4 0 0 this is my ip address.52389 www-12-01-prn1.f.http SYN_SENT

tcp4 0 0 this is my ip address.52388 98.129.174.16.http SYN_SENT

tcp4 0 0 this is my ip address.52387 98.129.174.16.http SYN_SENT

tcp4 0 0 this is my ip address.52386 98.129.174.16.http SYN_SENT

tcp4 0 0 this is my ip address.52385 98.129.174.16.http SYN_SENT

tcp4 0 0 this is my ip address.52384 98.129.174.16.http SYN_SENT

tcp4 0 0 this is my ip address.52383 98.129.174.16.http SYN_SENT

tcp4 0 0 this is my ip address.52382 93.184.216.119.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52381 93.184.216.119.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52380 ec2-107-20-223-5.https SYN_SENT

tcp4 0 179 this is my ip address.52379 lax02s02-in-f31..https FIN_WAIT_1

tcp4 0 179 this is my ip address.52378 lax02s02-in-f31..https FIN_WAIT_1

tcp4 0 179 this is my ip address.52377 lax02s02-in-f31..https FIN_WAIT_1

tcp4 0 0 this is my ip address.52376 lax02s02-in-f31..http FIN_WAIT_1

tcp4 0 0 this is my ip address.52375 lax02s02-in-f31..http FIN_WAIT_1

tcp4 0 0 this is my ip address.52374 lax02s01-in-f2.1.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52373 lax02s01-in-f2.1.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52372 lax02s01-in-f13..http FIN_WAIT_1

tcp4 0 0 this is my ip address.52371 lax02s01-in-f13..http FIN_WAIT_1

tcp4 0 0 this is my ip address.52370 lax02s01-in-f13..http FIN_WAIT_1

tcp4 0 0 this is my ip address.52369 lax02s01-in-f13..http FIN_WAIT_1

tcp4 0 0 this is my ip address.52368 lax02s01-in-f13..http FIN_WAIT_1

tcp4 0 0 this is my ip address.52367 lax02s01-in-f13..http FIN_WAIT_1

tcp4 0 1035 this is my ip address.52366 lax02s01-in-f11..http ESTABLISHED

tcp4 0 0 this is my ip address.52365 oa-in-f95.1e100..http FIN_WAIT_1

tcp4 0 0 this is my ip address.52364 oa-in-f95.1e100..http FIN_WAIT_1

tcp4 0 185 this is my ip address.52363 adsl-75-11-108-1.https FIN_WAIT_1

tcp4 0 185 this is my ip address.52362 adsl-75-11-108-1.https FIN_WAIT_1

tcp4 0 185 this is my ip address.52361 adsl-75-11-108-1.https FIN_WAIT_1

tcp4 0 185 this is my ip address.52360 adsl-75-11-108-1.https FIN_WAIT_1

tcp4 0 185 this is my ip address.52359 adsl-75-11-108-1.https FIN_WAIT_1

tcp4 0 185 this is my ip address.52358 adsl-75-11-108-1.https FIN_WAIT_1

tcp4 0 0 this is my ip address.52357 ec2-184-73-216-1.http SYN_SENT

tcp4 0 0 this is my ip address.52356 ec2-184-73-216-1.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52355 ec2-184-73-216-1.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52354 ec2-184-73-216-1.http FIN_WAIT_1

tcp4 0 1296 this is my ip address.52353 ec2-184-73-216-1.http ESTABLISHED

tcp4 0 0 this is my ip address.52352 www2.twitter.com.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52351 www2.twitter.com.http FIN_WAIT_1

tcp4 0 830 this is my ip address.52350 www2.twitter.com.http ESTABLISHED

tcp4 0 0 this is my ip address.52349 lewis-james.com.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52348 lewis-james.com.http FIN_WAIT_1

tcp4 0 0 this is my ip address.52347 lewis-james.com.http FIN_WAIT_1

tcp4 0 856 this is my ip address.52346 lewis-james.com.http ESTABLISHED

tcp4 0 0 this is my ip address.52345 lewis-james.com.http FIN_WAIT_1

tcp4 0 572 this is my ip address.52344 www-12-01-prn1.f.http ESTABLISHED

tcp4 0 0 this is my ip address.52343 www-12-01-prn1.f.http FIN_WAIT_1

tcp4 0 847 this is my ip address.52342 lewis-james.com.http FIN_WAIT_1

tcp4 37 0 this is my ip address.52337 v-d-1b.sjc.dropb.https CLOSE_WAIT

tcp4 37 0 this is my ip address.52325 ec2-107-20-249-1.https CLOSE_WAIT

tcp4 37 0 this is my ip address.52324 ec2-107-20-249-2.https CLOSE_WAIT

tcp4 37 0 this is my ip address.52323 v-client-2b.sjc..https CLOSE_WAIT

tcp4 37 0 this is my ip address.52322 v-d-1b.sjc.dropb.https CLOSE_WAIT

tcp4 37 0 this is my ip address.52321 v-client-2b.sjc..https CLOSE_WAIT

tcp4 0 0 this is my ip address.52320 sjc-not1.sjc.dro.http ESTABLISHED

tcp4 0 0 this is my ip address.52285 ec2-107-20-249-2.https FIN_WAIT_1

tcp4 0 0 this is my ip address.52284 ec2-107-20-249-5.https FIN_WAIT_1

tcp4 0 0 this is my ip address.52283 v-client-1b.sjc..https LAST_ACK

udp4 0 0 this is my ip address.ntp *.*

udp6 0 0 nameofcomputer-macbook-pro.ntp *.*

udp6 0 0 *.63649 *.*

udp4 0 0 *.63649 *.*

udp6 0 0 *.49540 *.*

udp4 0 0 *.49540 *.*

udp6 0 0 *.63456 *.*

udp4 0 0 *.63456 *.*

udp6 0 0 *.50093 *.*

udp4 0 0 *.50093 *.*

udp6 0 0 *.55433 *.*

udp4 0 0 *.55433 *.*

udp6 0 0 *.65439 *.*

udp4 0 0 *.65439 *.*

udp4 0 0 *.* *.*

udp4 0 0 *.17500 *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

udp4 0 0 localhost.ntp *.*

udp6 0 0 localhost.ntp *.*

udp6 0 0 localhost.ntp *.*

udp6 0 0 *.ntp *.*

udp4 0 0 *.ntp *.*

udp6 0 0 *.mdns *.*

udp4 0 0 *.mdns *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

icm4 0 0 *.* *.*

icm6 0 0 *.* *.*

Active LOCAL (UNIX) domain sockets

Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr

ffffff800dd31200 stream 0 0 0 ffffff800dd30240 0 0 /var/run/mDNSResponder

ffffff800dd30240 stream 0 0 0 ffffff800dd31200 0 0

ffffff800dd30540 stream 0 0 0 ffffff800dd30480 0 0

ffffff800dd30480 stream 0 0 0 ffffff800dd30540 0 0

ffffff800c3696c0 stream 0 0 0 ffffff800ff7e4c0 0 0

ffffff800ff7e4c0 stream 0 0 0 ffffff800c3696c0 0 0

ffffff800dd30780 stream 0 0 0 ffffff800dd32040 0 0 /var/run/mDNSResponder

ffffff800dd32040 stream 0 0 0 ffffff800dd30780 0 0

ffffff800dd30b40 stream 0 0 0 ffffff800dd30c00 0 0

ffffff800dd30c00 stream 0 0 0 ffffff800dd30b40 0 0

ffffff800c36a440 stream 0 0 0 ffffff800dd31bc0 0 0

ffffff800dd31bc0 stream 0 0 0 ffffff800c36a440 0 0

ffffff800c3693c0 stream 0 0 0 ffffff800c36a5c0 0 0

ffffff800c36a5c0 stream 0 0 0 ffffff800c3693c0 0 0

ffffff800dd30f00 stream 0 0 0 ffffff800c36bb80 0 0

ffffff800c36bb80 stream 0 0 0 ffffff800dd30f00 0 0

ffffff800ff7ee80 stream 0 0 0 ffffff800bd5d480 0 0

ffffff800bd5d480 stream 0 0 0 ffffff800ff7ee80 0 0

ffffff800ff7e7c0 stream 0 0 0 ffffff800ff7ef40 0 0

ffffff800ff7ef40 stream 0 0 0 ffffff800ff7e7c0 0 0

ffffff800dd300c0 stream 0 0 0 ffffff800ff7e340 0 0

ffffff800ff7e340 stream 0 0 0 ffffff800dd300c0 0 0

ffffff800ff7e700 stream 0 0 0 ffffff800dd306c0 0 0

ffffff800dd306c0 stream 0 0 0 ffffff800ff7e700 0 0

ffffff800dd309c0 stream 0 0 0 ffffff800ff7e280 0 0

ffffff800ff7e280 stream 0 0 0 ffffff800dd309c0 0 0

ffffff800dd31080 stream 0 0 0 ffffff800dd30e40 0 0

ffffff800dd30e40 stream 0 0 0 ffffff800dd31080 0 0

ffffff800dd30180 stream 0 0 0 ffffff800bd5e200 0 0 /var/run/mDNSResponder

ffffff800bd5e200 stream 0 0 0 ffffff800dd30180 0 0

ffffff800dd315c0 stream 0 0 0 ffffff800dd31440 0 0

ffffff800dd31440 stream 0 0 0 ffffff800dd315c0 0 0

ffffff800c369d80 stream 0 0 0 ffffff800dd31380 0 0

ffffff800dd31380 stream 0 0 0 ffffff800c369d80 0 0

ffffff800ff7ec40 stream 0 0 0 ffffff800ff7eb80 0 0 /var/run/mDNSResponder

ffffff800ff7eb80 stream 0 0 0 ffffff800ff7ec40 0 0

ffffff800dd31f80 stream 0 0 0 0 0 0

ffffff800c3690c0 stream 0 0 0 ffffff800c369240 0 0 /var/tmp/launchd/sock

ffffff800c369240 stream 0 0 0 ffffff800c3690c0 0 0

ffffff800c36abc0 stream 0 0 0 ffffff800c36ac80 0 0 /var/run/mDNSResponder

ffffff800c36ac80 stream 0 0 0 ffffff800c36abc0 0 0

ffffff800bd5e440 stream 0 0 0 ffffff800c369840 0 0 /.dbfseventsd

ffffff800c369840 stream 0 0 0 ffffff800bd5e440 0 0

ffffff800dd32a00 stream 0 0 ffffff800e3863e0 0 0 0 /.dbfseventsd

ffffff800c36ab00 stream 0 0 0 ffffff800c36a800 0 0

ffffff800c36a800 stream 0 0 0 ffffff800c36ab00 0 0

ffffff800dd31e00 stream 0 0 0 ffffff800dd31ec0 0 0 /var/run/mDNSResponder

ffffff800dd31ec0 stream 0 0 0 ffffff800dd31e00 0 0

ffffff800dd32280 stream 0 0 ffffff800e1c41f0 0 0 0 /tmp/icssuis502

ffffff800dd32340 stream 0 0 0 ffffff800dd32400 0 0 /var/run/mDNSResponder

ffffff800dd32400 stream 0 0 0 ffffff800dd32340 0 0

ffffff800dd32640 stream 0 0 0 ffffff800dd32700 0 0 /var/run/mDNSResponder

ffffff800dd32700 stream 0 0 0 ffffff800dd32640 0 0

ffffff800bd5d9c0 stream 0 0 0 ffffff800c369480 0 0 /var/run/mDNSResponder

ffffff800c369480 stream 0 0 0 ffffff800bd5d9c0 0 0

ffffff800bd5d540 stream 0 0 0 ffffff800dd32b80 0 0 /var/run/usbmuxd

ffffff800dd32b80 stream 0 0 0 ffffff800bd5d540 0 0

ffffff800c369000 stream 0 0 0 ffffff800dd32e80 0 0 /var/run/mDNSResponder

ffffff800dd32e80 stream 0 0 0 ffffff800c369000 0 0

ffffff800c369b40 stream 0 0 0 ffffff800c369c00 0 0 /var/run/mDNSResponder

ffffff800c369c00 stream 0 0 0 ffffff800c369b40 0 0

ffffff800bd5e080 stream 0 0 0 ffffff800bd5dd80 0 0 /var/run/mDNSResponder

ffffff800bd5dd80 stream 0 0 0 ffffff800bd5e080 0 0

ffffff800bd5d780 stream 0 0 0 ffffff800bd5da80 0 0

ffffff800bd5da80 stream 0 0 0 ffffff800bd5d780 0 0

ffffff800bd5d300 stream 0 0 0 ffffff800bd5dc00 0 0

ffffff800bd5dc00 stream 0 0 0 ffffff800bd5d300 0 0

ffffff800c36bd00 stream 0 0 0 ffffff800bd5d000 0 0

ffffff800bd5d000 stream 0 0 0 ffffff800c36bd00 0 0

ffffff800c36b880 stream 0 0 0 ffffff800c36ba00 0 0

ffffff800c36ba00 stream 0 0 0 ffffff800c36b880 0 0

ffffff800c36b100 stream 0 0 ffffff800d7a6d90 0 0 0 /tmp/launch-V3v4OM/org.x:0

ffffff800c369cc0 stream 0 0 ffffff800d7a6f80 0 0 0 /tmp/launch-UctQg0/Listeners

ffffff800c36a680 stream 0 0 ffffff800d7a7170 0 0 0 /tmp/launch-JPeVe6/Render

ffffff800c36b580 stream 0 0 ffffff800d7a7a28 0 0 0 /tmp/launchd-98.bpIy1F/sock

ffffff800c36a500 stream 0 0 0 ffffff800c36ae00 0 0 /var/run/mDNSResponder

ffffff800c36ae00 stream 0 0 0 ffffff800c36a500 0 0

ffffff800c36a380 stream 0 0 0 ffffff800c36af80 0 0 /var/run/mDNSResponder

ffffff800c36af80 stream 0 0 0 ffffff800c36a380 0 0

ffffff800c36b280 stream 0 0 0 ffffff800c36a200 0 0

ffffff800c36a200 stream 0 0 0 ffffff800c36b280 0 0

ffffff800c36a8c0 stream 0 0 0 ffffff800c36b7c0 0 0

ffffff800c36b7c0 stream 0 0 0 ffffff800c36a8c0 0 0

ffffff800c369fc0 stream 0 0 0 ffffff800c36a740 0 0

ffffff800c36a740 stream 0 0 0 ffffff800c369fc0 0 0

ffffff800c36bac0 stream 0 0 0 ffffff800bd5e2c0 0 0

ffffff800bd5e2c0 stream 0 0 0 ffffff800c36bac0 0 0

ffffff800c36bf40 stream 0 0 0 ffffff800bd5db40 0 0

ffffff800bd5db40 stream 0 0 0 ffffff800c36bf40 0 0

ffffff800c36a140 stream 0 0 0 ffffff800c36b040 0 0 /var/run/mDNSResponder

ffffff800c36b040 stream 0 0 0 ffffff800c36a140 0 0

ffffff800c36aec0 stream 0 0 0 ffffff800c36b4c0 0 0

ffffff800c36b4c0 stream 0 0 0 ffffff800c36aec0 0 0

ffffff800c369e40 stream 0 0 ffffff800c72d7c0 0 0 0 /var/run/pppconfd

ffffff800c36b340 stream 0 0 0 ffffff800c36b400 0 0

ffffff800c36b400 stream 0 0 0 ffffff800c36b340 0 0

ffffff800c36b640 stream 0 0 0 ffffff800c36b700 0 0

ffffff800c36b700 stream 0 0 0 ffffff800c36b640 0 0

ffffff800c36bdc0 stream 0 0 0 ffffff800c36be80 0 0

ffffff800c36be80 stream 0 0 0 ffffff800c36bdc0 0 0

ffffff800bd5d0c0 stream 0 0 0 ffffff800bd5d180 0 0

ffffff800bd5d180 stream 0 0 0 ffffff800bd5d0c0 0 0

ffffff800bd5d840 stream 0 0 0 ffffff800bd5d900 0 0

ffffff800bd5d900 stream 0 0 0 ffffff800bd5d840 0 0

ffffff800bd5de40 stream 0 0 0 ffffff800bd5df00 0 0

ffffff800bd5df00 stream 0 0 0 ffffff800bd5de40 0 0

ffffff800bd5e680 stream 0 0 0 ffffff800bd5e740 0 0

ffffff800bd5e740 stream 0 0 0 ffffff800bd5e680 0 0

ffffff800bd5e800 stream 0 0 0 ffffff800bd5e980 0 0 /var/tmp/launchd/sock

ffffff800bd5e980 stream 0 0 0 ffffff800bd5e800 0 0

ffffff800bd5eb00 stream 0 0 0 ffffff800bd5ea40 0 0

ffffff800bd5ea40 stream 0 0 0 ffffff800bd5eb00 0 0

ffffff800bd5ebc0 stream 0 0 0 ffffff800bd5ec80 0 0

ffffff800bd5ec80 stream 0 0 0 ffffff800bd5ebc0 0 0

ffffff800bd5ee00 stream 0 0 0 ffffff800bd5ed40 0 0 /var/tmp/launchd/sock

ffffff800bd5ed40 stream 0 0 0 ffffff800bd5ee00 0 0

ffffff800bd5ef80 stream 0 0 0 ffffff800bd5eec0 0 0

ffffff800bd5eec0 stream 0 0 0 ffffff800bd5ef80 0 0

ffffff800bd5f100 stream 0 0 0 ffffff800bd5f040 0 0

ffffff800bd5f040 stream 0 0 0 ffffff800bd5f100 0 0

ffffff800bd5f280 stream 0 0 0 ffffff800bd5f1c0 0 0

ffffff800bd5f1c0 stream 0 0 0 ffffff800bd5f280 0 0

ffffff800bd5f400 stream 0 0 0 ffffff800bd5f340 0 0

ffffff800bd5f340 stream 0 0 0 ffffff800bd5f400 0 0

ffffff800bd5f4c0 stream 0 0 0 ffffff800bd5f580 0 0

ffffff800bd5f580 stream 0 0 0 ffffff800bd5f4c0 0 0

ffffff800bd5f7c0 stream 0 0 ffffff800c10c740 0 0 0 /var/tmp/launchd/sock

ffffff800bd5f880 stream 0 0 ffffff800c10c930 0 0 0 /private/var/run/cupsd

ffffff800bd5f940 stream 0 0 ffffff800c10cc18 0 0 0 /var/run/usbmuxd

ffffff800bd5fac0 stream 0 0 ffffff800c10ce08 0 0 0 /var/run/asl_input

ffffff800bd5fb80 stream 0 0 ffffff800c10cf00 0 0 0 /var/run/SCHelper

ffffff800bd5fc40 stream 0 0 ffffff800c0f1000 0 0 0 /var/run/vpncontrol.sock

ffffff800bd5fd00 stream 0 0 ffffff800c0f10f8 0 0 0 /private/var/run/printtool

ffffff800bd5fdc0 stream 0 0 ffffff800c0f11f0 0 0 0 /var/run/portmap.socket

ffffff800bd5ff40 stream 0 0 ffffff800c0f12e8 0 0 0 /var/run/mDNSResponder

ffffff800bd5fe80 stream 0 0 ffffff800c0f13e0 0 0 0 /var/run/com.apple.ActivityMonitor.socket

ffffff800dd32ac0 dgram 0 0 0 ffffff800bd5d600 ffffff800bd5d600 0

ffffff800bd5d600 dgram 0 0 0 ffffff800dd32ac0 ffffff800dd32ac0 0

ffffff800bd5f700 dgram 0 0 0 ffffff800bd5f640 ffffff800bd5f640 0

ffffff800bd5f640 dgram 0 0 0 ffffff800bd5f700 ffffff800bd5f700 0

ffffff800ff7e580 dgram 0 0 0 ffffff800ff7e640 ffffff800ff7e640 0

ffffff800ff7e640 dgram 0 0 0 ffffff800ff7e580 ffffff800ff7e580 0

ffffff800dd32100 dgram 0 0 0 ffffff800dd321c0 ffffff800dd321c0 0

ffffff800dd321c0 dgram 0 0 0 ffffff800dd32100 ffffff800dd32100 0

ffffff800dd324c0 dgram 0 0 0 ffffff800dd32580 ffffff800dd32580 0

ffffff800dd32580 dgram 0 0 0 ffffff800dd324c0 ffffff800dd324c0 0

ffffff800bd5d240 dgram 0 0 0 ffffff800c369600 ffffff800c369600 0

ffffff800c369600 dgram 0 0 0 ffffff800bd5d240 ffffff800bd5d240 0

ffffff800c369180 dgram 0 0 0 ffffff800c369300 ffffff800c369300 0

ffffff800c369300 dgram 0 0 0 ffffff800c369180 ffffff800c369180 0

ffffff800dd32d00 dgram 0 0 0 ffffff800dd32dc0 ffffff800dd32dc0 0

ffffff800dd32dc0 dgram 0 0 0 ffffff800dd32d00 ffffff800dd32d00 0

ffffff800dd32f40 dgram 0 0 0 ffffff800c369540 ffffff800c369540 0

ffffff800c369540 dgram 0 0 0 ffffff800dd32f40 ffffff800dd32f40 0

ffffff800bd5e8c0 dgram 0 0 0 ffffff800bd5e380 ffffff800bd5e380 0

ffffff800bd5e380 dgram 0 0 0 ffffff800bd5e8c0 ffffff800bd5e8c0 0

ffffff800c36ad40 dgram 0 0 0 ffffff800bd5dfc0 ffffff800bd5dfc0 0

ffffff800bd5dfc0 dgram 0 0 0 ffffff800c36ad40 ffffff800c36ad40 0

ffffff800c36a2c0 dgram 0 0 0 ffffff800c36b1c0 ffffff800c36b1c0 0

ffffff800c36b1c0 dgram 0 0 0 ffffff800c36a2c0 ffffff800c36a2c0 0

ffffff800bd5d3c0 dgram 0 0 0 ffffff800c36b940 ffffff800c36b940 0

ffffff800c36b940 dgram 0 0 0 ffffff800bd5d3c0 ffffff800bd5d3c0 0

ffffff800bd5e5c0 dgram 0 0 0 ffffff800bd5e500 ffffff800bd5e500 0

ffffff800bd5e500 dgram 0 0 0 ffffff800bd5e5c0 ffffff800bd5e5c0 0

ffffff800bd5fa00 dgram 0 0 ffffff800c10cd10 0 0 0 /var/run/syslog


_________________


Active Internet connections

Proto Recv-Q Send-Q Local Address Foreign Address (state)

tcp4 0 0 this is my ip address.55008 50.16.190.174.http ESTABLISHED

tcp4 0 0 this is my ip address.55007 50.16.190.174.http ESTABLISHED

tcp4 0 0 this is my ip address.54900 69.58.188.37.https LAST_ACK

tcp4 0 0 this is my ip address.54887 69.58.188.37.https LAST_ACK

tcp4 0 0 this is my ip address.54851 69.58.188.37.https LAST_ACK

tcp4 0 0 this is my ip address.54813 69.58.188.37.https LAST_ACK

tcp4 0 0 this is my ip address.54773 67.220.204.218.https LAST_ACK

tcp4 0 0 this is my ip address.54771 67.220.204.218.https LAST_ACK

tcp4 0 0 this is my ip address.54770 67.220.204.218.https LAST_ACK

tcp4 0 0 this is my ip address.54769 67.220.204.218.https LAST_ACK

tcp4 0 0 this is my ip address.54767 67.220.204.218.https LAST_ACK

tcp4 37 0 this is my ip address.54762 107.20.249.164.https CLOSE_WAIT

tcp4 37 0 this is my ip address.54760 107.20.249.139.https CLOSE_WAIT

tcp4 37 0 this is my ip address.54746 199.47.216.172.https CLOSE_WAIT

tcp4 0 0 this is my ip address.54717 69.58.188.37.https LAST_ACK

tcp4 37 0 this is my ip address.54176 199.47.217.174.https CLOSE_WAIT

tcp4 0 0 this is my ip address.55004 69.171.227.58.http FIN_WAIT_2

udp6 0 0 this isnameof my computer macbook-pro.ntp *.*

udp4 0 0 *.bootpc *.*

udp4 0 0 *.* *.*

udp4 0 0 *.17500 *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

udp4 0 0 localhost.ntp *.*

udp6 0 0 localhost.ntp *.*

udp6 0 0 localhost.ntp *.*

udp6 0 0 *.ntp *.*

udp4 0 0 *.ntp *.*

udp6 0 0 *.mdns *.*

udp4 0 0 *.mdns *.*

udp4 0 0 *.* *.*

udp4 0 0 *.* *.*

icm4 0 0 *.* *.*


________


Active Internet connections

Proto Recv-Q Send-Q Local Address Foreign Address (state)

tcp4 0 0 XXXXXXXXX.2.49619 69.58.188.38.https LAST_ACK

tcp4 0 0 XXXXXXXXX.2.49497 pixel.quantserve.http LAST_ACK

tcp4 0 0 XXXXXXXXX.2.49470 lax04s08-in-f27..http LAST_ACK

tcp4 0 0 XXXXXXXXX.2.49446 66-226-79-24.ded.http LAST_ACK

tcp4 0 0 XXXXXXXXX.2.49439 74.113.233.133.d.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49438 74.113.233.133.d.http CLOSING

tcp4 0 0 XXXXXXXXX.2.49432 pixel.quantserve.http LAST_ACK

tcp4 0 0 XXXXXXXXX.2.49377 74.86.70.106-sta.http CLOSING

tcp4 0 0 XXXXXXXXX.2.49374 24.143.205.74.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49373 24.143.205.74.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49372 24.143.205.74.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49371 24.143.205.74.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49370 24.143.205.202.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49369 24.143.205.202.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49368 24.143.205.202.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49367 24.143.205.49.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49366 24.143.205.49.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49365 24.143.205.49.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49364 24.143.205.81.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49363 24.143.205.81.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49362 24.143.205.81.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49361 24.143.205.74.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49360 24.143.205.74.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49359 24.143.205.74.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49343 24.143.205.202.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49342 24.143.205.202.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49341 24.143.205.202.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49340 24.143.205.49.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49339 24.143.205.49.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49338 24.143.205.49.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49337 24.143.205.233.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49336 24.143.205.233.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49335 24.143.205.233.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49333 aweber.com.http LAST_ACK

tcp4 0 0 XXXXXXXXX.2.49308 lax02s01-in-f13..http LAST_ACK

tcp4 0 0 XXXXXXXXX.2.49307 lax02s01-in-f13..http LAST_ACK

tcp4 0 0 XXXXXXXXX.2.49272 lax02s02-in-f0.1.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49271 lax02s02-in-f0.1.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49270 lax02s02-in-f0.1.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49269 lax02s02-in-f0.1.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49268 lax02s02-in-f0.1.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49267 lax02s02-in-f0.1.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49236 www-12-05-prn1.f.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49235 www-12-05-prn1.f.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49234 www-12-05-prn1.f.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49226 server-216-137-4.http FIN_WAIT_1

tcp4 0 0 XXXXXXXXX.2.49225 server-216-137-4.http FIN_WAIT_1

tcp4 37 0 XXXXXXXXX.2.49194 ec2-107-20-249-2.https CLOSE_WAIT

tcp4 37 0 XXXXXXXXX.2.49193 ec2-107-20-249-1.https CLOSE_WAIT

tcp4 37 0 XXXXXXXXX.2.49192 v-client-2a.sjc..https CLOSE_WAIT

tcp4 37 0 XXXXXXXXX.2.49191 v-d-2a.sjc.dropb.https CLOSE_WAIT

tcp4 0 0 XXXXXXXXX.2.49190 sjc-not1.sjc.dro.http ESTABLISHED

tcp4 37 0 XXXXXXXXX.2.49189 v-d-2a.sjc.dropb.https CLOSE_WAIT

tcp4 37 0 XXXXXXXXX.2.49188 v-client-2a.sjc..https CLOSE_WAIT

tcp4 0 0 XXXXXXXXX.2.49409 channel-jj-13-01.http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49545 fcds346.lax.llnw.macro TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.49519 www-12-05-prn1.f.http TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.49622 www2.twitter.com.http TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.49620 r-199-59-148-20..http TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.49621 linkedin-ela4.co.http TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.49608 lax04s08-in-f3.1.http TIME_WAIT

tcp4 0 0 XXXXXXXXX.2.49289 lb230.lsag.coten.http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49290 lb230.lsag.coten.http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49263 server-216-137-4.http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49302 lax02s02-in-f27..http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49303 lax02s02-in-f27..http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49304 lax02s02-in-f27..http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49305 lax02s02-in-f27..http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49259 server-216-137-4.http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49260 server-216-137-4.http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49287 lb230.lsag.coten.http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49288 lb230.lsag.coten.http FIN_WAIT_2

tcp4 0 0 XXXXXXXXX.2.49445 ec2-184-73-131-1.http FIN_WAIT_2

Reply
User profile for user: jameso1111
jameso1111 Author
User level: Level 1
9 points

Dec 30, 2011 10:06 AM in response to jameso1111

Hi guys. Hope the long list was not too long- looking forward to finding out if you see anything. I found this to remove the .ds store file but maybe will wait until you tell me if anything is to be concerned about. I read if a trojan horse is installed that the computer can be viewed remotely so id like to just find out. Thanks. http://forums.macrumors.com/showthread.php?t=214380

Reply
User profile for user: Kurt Lang
Kurt Lang
User level: Level 9
70,677 points

Dec 30, 2011 11:13 AM in response to jameso1111

Maybe a bit strangely, 74.125.224.181 belongs to this person.


Queried whois.internic.net with "dom 1e100.net"...


Domain Name: 1E100.NET

Registrar: MARKMONITOR INC.

Whois Server: whois.markmonitor.com

Referral URL: http://www.markmonitor.com

Name Server: NS1.GOOGLE.COM

Name Server: NS2.GOOGLE.COM

Name Server: NS3.GOOGLE.COM

Name Server: NS4.GOOGLE.COM

Status: clientDeleteProhibited

Status: clientRenewProhibited

Status: clientTransferProhibited

Status: clientUpdateProhibited

Status: serverDeleteProhibited

Status: serverTransferProhibited

Status: serverUpdateProhibited

Updated Date: 15-sep-2010

Creation Date: 25-sep-2009

Expiration Date: 25-sep-2019


>>> Last update of whois database: Fri, 30 Dec 2011 18:31:37 UTC <<<

Queried whois.markmonitor.com with "1e100.net"...


Registrant:

DNS Admin

Google Inc.

1600 Amphitheatre Parkway

Mountain View CA 94043

US

dns-admin@google.com +1.6502530000 Fax: +1.6506188571


Domain Name: 1e100.net


Registrar Name: Markmonitor.com

Registrar Whois: whois.markmonitor.com

Registrar Homepage: http://www.markmonitor.com


Administrative Contact:

DNS Admin

Google Inc.

1600 Amphitheatre Parkway

Mountain View CA 94043

US

dns-admin@google.com +1.6502530000 Fax: +1.6506188571

Technical Contact, Zone Contact:

DNS Admin

Google Inc.

1600 Amphitheatre Parkway

Mountain View CA 94043

US

dns-admin@google.com +1.6502530000 Fax: +1.6506188571


Created on..............: 2009-09-24.

Expires on..............: 2019-09-24.

Record last updated on..: 2011-05-05.


The question then is, why does your Mac show an established connection to this person? I looked up the who is info on quite a few of the IP addresses, but they don't tell me a whole lot.


The main thing I guess is that someone nearby possibly hacked into your wireless router, since they only have a rather limited range. The most likely reason? They're using your bandwidth to download illegal movies, or whatever. Don't count out the possibility though that your Mac itself may have been hacked into.


Wait to see what others who can really read these logs tell you what they think, but if it were me, I'd:


1. Disconnect the router from the Internet. Just unplug the Ethernet cable going to the unit so you're offline. Then no one can stop you from changing settings, or see what you've changed them to.


2. By default the address you put into your web browser to access the settings is 192.168.0.1 . Check the manual to see if it's different. Use the supplied number if it is.


3. The browser should ask for the user name and password. By default, it's usually admin for the user name and no password. Again, check the manual if you can't get in using that.


4. Big one. Since anyone within range of your wireless signal can also put 192.168.0.1 into their browser and pick up your router, they can login and change anything. So the first thing to do is change the login password to something difficult to crack or guess. Use at least a 12 character password made up of a random string of letters and numbers. Something like 6AOIreqMAS15 . Make sure to write it down somewhere so you can get back in.


This free little password generator is what I use.


5. Enter the router's configuration and change the wireless security to WPA2 (don't use WPA2 Enterprise). Use a long random password to keep others out. The Netgear router I have will accept up to a 63 character passcode. Write that down also, or print it out as you'll need to reconfigure any other wireless devices in the house and enter that passcode.


6. Copy any personal information to a flash drive. Get your Snow Leopard disks out and do an Erase and Install of the hard drive. Apply all available updates. Reinstall your apps. A lot of work on this part I know, but it's the only way to be sure you've eliminated anything that may have been installed on your Mac.

Reply
User profile for user: Camelot
Camelot
User level: Level 9
60,151 points

Dec 30, 2011 12:32 PM in response to Kurt Lang

The question then is, why does your Mac show an established connection to this person? I looked up the who is info on quite a few of the IP addresses, but they don't tell me a whole lot.


Umm.. because he's opened web connections to any number of google-owned properties?


MarkMonitor isn't a person, it's a company that manages domain registrations for many corporations, including Apple - try whois =apple.com for example.


Indeed, Google themselves have a FAQ page about 1e100.net:


http://support.google.com/bin/answer.py?hl=en&answer=174717


So that doesn't raise any red flags for me. As for the others, without knowing what sites the user expects to be visiting it's impossible to predict whether there's any kind of problem here at all.

Reply
User profile for user: Kurt Lang
Kurt Lang
User level: Level 9
70,677 points

Dec 30, 2011 12:45 PM in response to Camelot

Umm.. because he's opened web connections to any number of google-owned properties?

I wasn't picking that one out as a threat (or any of them). Which is precisely why I said:


Wait to see what others who can really read these logs tell you what they think ...

As for the others, without knowing what sites the user expects to be visiting it's impossible to predict whether there's any kind of problem here at all.

That goes back to my comment of waiting and see. None of these log entries may be of any consequence at all.


The only sure thing so far is getting a password on the router, and using WPA2 with a strong password.

Reply
User profile for user: Camelot
Camelot
User level: Level 9
60,151 points

Dec 30, 2011 4:07 PM in response to Kurt Lang

I wasn't picking that one out as a threat (or any of them). Which is precisely why I said:


OK... except that you did, specifically, pick out a domain registered through MarkMonitor, which was what I was referring to.


Wait to see what others who can really read these logs tell you what they think ...

Is that comment directed at me, or at the original posted? 'cos I kind of think I can 'really read these logs'... and I'm saying there's nothing blatantly obvious there, especially since the current connection table is entirely dependent on what you're doing (or, at least, what you think you're doing) at the time you run the netstat.

Reply
User profile for user: Camelot
Camelot
User level: Level 9
60,151 points

Dec 30, 2011 4:10 PM in response to jameso1111

If I have AppleCare can genius bar helP me with this


If the problem is a compromised home network then it's extremely unlikely that taking your machine to the Genius bar is going to help since, by definition, you will no longer be on your home network and subject to whatever hack (if any) has compromised your home network. The Genius is likely to have the exact same response and questions as us - namely there's nothing blatantly obvious in what you've posted that points at any kind of hack beyond, possibly, a compromised wireless network. Changing your wireless network security settings should be priority #1 (and you should have already done that by now, anyway).


IF the 'suspicious' activity continues once you've secured your network you can dig a little deeper to see if there's anything more to do.

Reply
User profile for user: fane_j
fane_j
User level: Level 4
3,704 points

Dec 30, 2011 4:24 PM in response to jameso1111

I have no more than average knowlege on this topic, so don't take my word for it, but I see no indication your MBP being hacked.

I found this to remove the .ds store file

Read again what I told you about .DS_Store. Removing them is a waste of time, and seeing them is, at most, a cosmetic nuisance. If you need to employ your time until someone with expert knowledge takes a look at your log, look up what those TCP and UDP ports are assigned to. I suspect you'll find nothing unusual, but it's more useful.

it starts with 192

192.xxx.xxx.xxx are private addresses; they're assigned to devices on your LAN by the router. The router does NAT, so any such address will be on your side of the router and it will not seen on the Internet.

if a trojan horse is installed

If you suspect that, get ClamXav (it's donationware) and scan your disks. For added security, enable the built-in firewall (if it isn't enabled alread), which will control inbound traffic; and, for outbound traffic, try Little Snitch (similar to ZoneAlarm on Windows) -- not free, but it's got a free trial.


If WEP was broken, then the likeliest possibility is that the burglar wanted to steal bandwidth, either to get it without paying, or to avoid having illegal activities traced to him. As I said above, that's easily done. Getting into your MBP, however, is not at all easy, and would require considerably more skill. Is there anyone within the wless router's reach with that kind of skill?

Reply
User profile for user: Kurt Lang
Kurt Lang
User level: Level 9
70,677 points

Dec 30, 2011 5:17 PM in response to Camelot

OK... except that you did, specifically, pick out a domain registered through MarkMonitor, which was what I was referring to.

To repeat, I didn't pick that one out as a threat. I just randomly picked one of the many outside IP addresses from the logs and noted what it related to. I only said it was listed as an established connection, nothing more.

Is that comment directed at me, or at the original posted?

It was a repeat of that line in my initial post, before you joined in. So yes, at the OP.

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

MBP was hacked? Help for a Newbie.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up