Level 1

1 points

I've been repeatedly hacked multiple times this year

I believe I have been repeatedly hacked on my mac this year. I did a factory restore to base image in March after the last experience and upon reinstalling the OS immediately noticed multiple firewall stealth access attempts. I have repeat DDOS attempts on my router, spoofed connections, a flurry of shared wireless networks showing up out of nowhere, and whoever/whatever is causing this, has caused me a great deal of problems. I am so lost as what to do from here. I have replaced routers, formatted and reinstalled every single computer in my house, changed WAN ip's, and have switched to an alternate ISP. I work in IT but my experience is limited when it comes to terminal. I can perform basic commands, but understanding this is far beyond my comprehension.

Why is this happening and what can I do???? Any help is appreciated.

here is a w(mind you, remote sharing is entirely disabled)

USER TTY FROM LOGIN@ IDLE WHAT

Morrow console - 13:38 1:13 -

Morrow s000 - 14:46 - w

Here is a netstat

Active Internet connections

Proto Recv-Q Send-Q Local Address Foreign Address (state)

tcp4 0 0 192.168.1.3.58863 199.233.57.41.http ESTABLISHED

tcp4 0 0 192.168.1.3.58862 a23-3-69-17.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58854 a23-3-69-27.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58850 edge-star-ecmp-0.https ESTABLISHED

tcp4 0 0 192.168.1.3.58849 72.21.91.113.http CLOSE_WAIT

tcp4 0 0 192.168.1.3.58843 a23-57-4-46.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58842 a23-3-106-50.dep.http ESTABLISHED

tcp4 0 0 192.168.1.3.58841 a23-3-106-11.dep.http ESTABLISHED

tcp4 0 0 192.168.1.3.58840 a23-57-11-46.dep.http ESTABLISHED

tcp4 0 0 192.168.1.3.58839 a23-3-106-100.de.macro ESTABLISHED

tcp4 0 0 192.168.1.3.58838 ec2-54-235-79-20.http ESTABLISHED

tcp4 0 0 192.168.1.3.58837 ec2-54-235-79-20.http ESTABLISHED

tcp4 0 0 192.168.1.3.58836 ec2-54-235-79-20.http ESTABLISHED

tcp4 0 0 192.168.1.3.58835 cdn-208-111-128-.http CLOSE_WAIT

tcp4 0 0 192.168.1.3.58834 lga15s35-in-f27..http ESTABLISHED

tcp4 0 0 192.168.1.3.58833 64.74.101.52.http ESTABLISHED

tcp4 0 0 192.168.1.3.58832 64.74.101.52.http ESTABLISHED

tcp4 0 0 192.168.1.3.58831 lga15s35-in-f15..https ESTABLISHED

tcp4 0 0 192.168.1.3.58830 ec2-54-215-5-159.http ESTABLISHED

tcp4 0 0 192.168.1.3.58829 lga15s35-in-f27..http ESTABLISHED

tcp4 0 0 192.168.1.3.58828 ec2-54-215-5-159.http ESTABLISHED

tcp4 0 0 192.168.1.3.58827 ec2-54-215-5-159.http ESTABLISHED

tcp4 0 0 192.168.1.3.58826 a23-3-106-8.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58824 a23-3-106-24.dep.http ESTABLISHED

tcp4 0 0 192.168.1.3.58822 a23-3-106-8.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58821 a23-3-106-8.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58820 ec2-54-241-149-1.http ESTABLISHED

tcp4 0 0 192.168.1.3.58819 a23-3-69-75.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58818 a23-57-11-46.dep.http ESTABLISHED

tcp4 0 0 192.168.1.3.58817 a23-3-106-49.dep.http ESTABLISHED

tcp4 0 0 192.168.1.3.58814 ads-prod.advance.http ESTABLISHED

tcp4 0 0 192.168.1.3.58813 a23-3-106-49.dep.http ESTABLISHED

tcp4 0 0 192.168.1.3.58812 ads-prod.advance.http ESTABLISHED

tcp4 0 0 192.168.1.3.58811 ads-prod.advance.http ESTABLISHED

tcp4 0 0 192.168.1.3.58810 ads-prod.advance.http ESTABLISHED

tcp4 0 0 192.168.1.3.58809 ads-prod.advance.http ESTABLISHED

tcp4 0 0 192.168.1.3.58808 https-208-111-13.http CLOSE_WAIT

tcp4 0 0 192.168.1.3.58807 https-208-111-13.http CLOSE_WAIT

tcp4 0 0 192.168.1.3.58806 72.21.81.253.http CLOSE_WAIT

tcp4 0 0 192.168.1.3.58805 https-208-111-13.http CLOSE_WAIT

tcp4 0 0 192.168.1.3.58804 72.21.81.253.http CLOSE_WAIT

tcp4 0 0 192.168.1.3.58802 ads-prod.advance.http ESTABLISHED

tcp4 0 0 192.168.1.3.58799 a23-3-106-8.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58797 64.74.101.75.http ESTABLISHED

tcp4 0 0 192.168.1.3.58795 64.74.101.52.http ESTABLISHED

tcp4 0 0 192.168.1.3.58787 a23-3-106-50.dep.http ESTABLISHED

tcp4 0 0 192.168.1.3.58784 a23-3-106-8.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58778 a23-3-69-42.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58777 a23-3-69-42.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58772 a23-3-69-17.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58771 a23-3-69-17.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58770 a23-3-69-17.depl.http ESTABLISHED

tcp4 0 0 192.168.1.3.58768 lga15s34-in-f3.1.http ESTABLISHED

tcp4 0 0 192.168.1.3.57989 lga15s34-in-f3.1.http LAST_ACK

tcp4 0 0 192.168.1.3.55552 lga15s29-in-f1.1.http LAST_ACK

udp4 0 0 192.168.1.3.56305 192.168.1.154.37381

udp4 0 0 192.168.1.3.62163 192.168.1.153.37381

udp4 0 0 192.168.1.3.64748 192.168.1.152.37381

udp4 0 0 192.168.1.3.55993 192.168.1.151.37381

udp4 0 0 192.168.1.3.51198 192.168.1.150.37381

udp4 0 0 192.168.1.3.50185 192.168.1.149.37381

udp4 0 0 192.168.1.3.64539 192.168.1.148.37381

udp4 0 0 192.168.1.3.58685 192.168.1.147.37381

udp4 0 0 192.168.1.3.58499 192.168.1.146.37381

udp4 0 0 192.168.1.3.50239 192.168.1.145.37381

udp4 0 0 192.168.1.3.54924 192.168.1.144.37381

udp4 0 0 192.168.1.3.52171 192.168.1.143.37381

udp4 0 0 192.168.1.3.57158 192.168.1.142.37381

udp4 0 0 192.168.1.3.53463 192.168.1.141.37381

udp4 0 0 192.168.1.3.55471 192.168.1.140.37381

udp4 0 0 192.168.1.3.65197 192.168.1.139.37381

udp4 0 0 192.168.1.3.55859 192.168.1.138.37381

udp4 0 0 192.168.1.3.51674 192.168.1.137.37381

udp4 0 0 192.168.1.3.62321 192.168.1.136.37381

udp4 0 0 192.168.1.3.64965 192.168.1.135.37381

udp4 0 0 192.168.1.3.59193 192.168.1.134.37381

udp4 0 0 192.168.1.3.55133 192.168.1.133.37381

udp4 0 0 192.168.1.3.56466 192.168.1.132.37381

udp4 0 0 192.168.1.3.55245 192.168.1.131.37381

udp4 0 0 192.168.1.3.60437 192.168.1.130.37381

udp4 0 0 192.168.1.3.56471 192.168.1.129.37381

udp4 0 0 192.168.1.3.65043 192.168.1.128.37381

udp4 0 0 192.168.1.3.56824 192.168.1.127.37381

udp4 0 0 192.168.1.3.65470 192.168.1.126.37381

udp4 0 0 192.168.1.3.65281 192.168.1.125.37381

udp4 0 0 192.168.1.3.60593 192.168.1.124.37381

udp4 0 0 192.168.1.3.ntp *.*

udp6 0 0 *.62049 *.*

udp4 0 0 *.62049 *.*

udp6 0 0 *.54552 *.*

udp4 0 0 *.54552 *.*

udp6 0 0 *.63281 *.*

udp4 0 0 *.63281 *.*

udp6 0 0 *.54686 *.*

udp4 0 0 *.54686 *.*

udp6 0 0 *.64246 *.*

udp4 0 0 *.64246 *.*

udp6 0 0 davids-imac.ntp *.*

udp4 0 0 *.* *.*

udp6 0 0 localhost.ntp *.*

udp4 0 0 localhost.ntp *.*

udp6 0 0 localhost.ntp *.*

udp6 0 0 *.ntp *.*

udp4 0 0 *.ntp *.*

udp4 0 0 *.* *.*

udp46 0 0 *.* *.*

udp6 0 0 *.mdns *.*

udp4 0 0 *.mdns *.*

udp4 0 0 *.netbios-dgm *.*

udp4 0 0 *.netbios-ns *.*

icm6 0 0 *.* *.*

Active LOCAL (UNIX) domain sockets

Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr

ffffff800befffa0 stream 0 0 0 ffffff800dbc8e18 0 0 /var/run/mDNSResponder

ffffff800dbc8e18 stream 0 0 0 ffffff800befffa0 0 0

ffffff800dbc8580 stream 0 0 0 ffffff800dbc72c0 0 0 /tmp/launchd-132.uZ1xpZ/sock

ffffff800dbc72c0 stream 0 0 0 ffffff800dbc8580 0 0

ffffff800bfb3258 stream 0 0 0 ffffff800dbc67d0 0 0

ffffff800dbc67d0 stream 0 0 0 ffffff800bfb3258 0 0

ffffff800bf01198 stream 0 0 0 ffffff800dbc7770 0 0 /var/run/mDNSResponder

ffffff800dbc7770 stream 0 0 0 ffffff800bf01198 0 0

ffffff800dbc8710 stream 0 0 0 ffffff800dbc6190 0 0 /var/run/mDNSResponder

ffffff800dbc6190 stream 0 0 0 ffffff800dbc8710 0 0

ffffff800bf017d8 stream 0 0 0 ffffff800dbc76a8 0 0 /var/tmp/launchd/sock

ffffff800dbc76a8 stream 0 0 0 ffffff800bf017d8 0 0

ffffff800dbc6af0 stream 0 0 0 ffffff800dbc84b8 0 0

ffffff800dbc84b8 stream 0 0 0 ffffff800dbc6af0 0 0

ffffff800beffc80 stream 0 0 0 ffffff800bfb4c20 0 0 /var/tmp/launchd/sock

ffffff800bfb4c20 stream 0 0 0 ffffff800beffc80 0 0

ffffff800dbc7f40 stream 0 0 0 ffffff800bfb57d8 0 0

ffffff800bfb57d8 stream 0 0 0 ffffff800dbc7f40 0 0

ffffff801357fa30 stream 0 0 0 ffffff800dbc8008 0 0

ffffff800dbc8008 stream 0 0 0 ffffff801357fa30 0 0

ffffff800f8809c8 stream 0 0 0 ffffff800bf00388 0 0

ffffff800bf00388 stream 0 0 0 ffffff800f8809c8 0 0

ffffff800bfb49c8 stream 0 0 0 ffffff800f881198 0 0 /var/run/mDNSResponder

ffffff800f881198 stream 0 0 0 ffffff800bfb49c8 0 0

ffffff800beffbb8 stream 0 0 0 ffffff800bfb53f0 0 0

ffffff800bfb53f0 stream 0 0 0 ffffff800beffbb8 0 0

ffffff800f881d50 stream 0 0 0 ffffff800beff7d0 0 0

ffffff800beff7d0 stream 0 0 0 ffffff800f881d50 0 0

ffffff800bf01e18 stream 0 0 0 ffffff800dbc6000 0 0

ffffff800dbc6000 stream 0 0 0 ffffff800bf01e18 0 0

ffffff800bf00c20 stream 0 0 ffffff8012635b20 0 0 0 /tmp/launchd-328.hIt4jl/sock

ffffff800dbc6e10 stream 0 0 0 ffffff800dbc6a28 0 0

ffffff800dbc6a28 stream 0 0 0 ffffff800dbc6e10 0 0

ffffff800f881ee0 stream 0 0 0 ffffff800dbc88a0 0 0 /var/tmp/launchd/sock

ffffff800dbc88a0 stream 0 0 0 ffffff800f881ee0 0 0

ffffff800bfb5af8 stream 0 0 0 ffffff800bfb58a0 0 0

ffffff800bfb58a0 stream 0 0 0 ffffff800bfb5af8 0 0

ffffff800dbc8a30 stream 0 0 0 ffffff800dbc8d50 0 0 /var/run/mDNSResponder

ffffff800dbc8d50 stream 0 0 0 ffffff800dbc8a30 0 0

ffffff800dbc8968 stream 0 0 0 ffffff800dbc6bb8 0 0 /var/run/usbmuxd

ffffff800dbc6bb8 stream 0 0 0 ffffff800dbc8968 0 0

ffffff800dbc79c8 stream 0 0 0 ffffff800dbc7a90 0 0

ffffff800dbc7a90 stream 0 0 0 ffffff800dbc79c8 0 0

ffffff800bf01c88 stream 0 0 0 ffffff800b4e1000 0 0

ffffff800b4e1000 stream 0 0 0 ffffff800bf01c88 0 0

ffffff800b4e3710 stream 0 0 0 ffffff800b4e3648 0 0

ffffff800b4e3648 stream 0 0 0 ffffff800b4e3710 0 0

ffffff800bfb42c0 stream 0 0 0 ffffff800bfb45e0 0 0

ffffff800bfb45e0 stream 0 0 0 ffffff800bfb42c0 0 0

ffffff800bfb3000 stream 0 0 0 ffffff800bfb30c8 0 0

ffffff800bfb30c8 stream 0 0 0 ffffff800bfb3000 0 0

ffffff800bfb3320 stream 0 0 0 ffffff800bfb3708 0 0 /var/run/mDNSResponder

ffffff800bfb3708 stream 0 0 0 ffffff800bfb3320 0 0

ffffff800bfb34b0 stream 0 0 0 ffffff800bfb3578 0 0 /var/run/mDNSResponder

ffffff800bfb3578 stream 0 0 0 ffffff800bfb34b0 0 0

ffffff800bfb37d0 stream 0 0 0 ffffff800bfb3898 0 0 /var/run/mDNSResponder

ffffff800bfb3898 stream 0 0 0 ffffff800bfb37d0 0 0

ffffff800bfb3af0 stream 0 0 0 ffffff800bfb3c80 0 0 /var/run/mDNSResponder

ffffff800bfb3c80 stream 0 0 0 ffffff800bfb3af0 0 0

ffffff800bfb3bb8 stream 0 0 ffffff800db1da28 0 0 0 /var/folders/5j/ms0_c30d0_3606g73nlqxjxw0000gn/T/icssuis501

ffffff800bfb4db0 stream 0 0 0 ffffff800bfb3ed8 0 0

ffffff800bfb3ed8 stream 0 0 0 ffffff800bfb4db0 0 0

ffffff800bfb4838 stream 0 0 0 ffffff800bfb4388 0 0

ffffff800bfb4388 stream 0 0 0 ffffff800bfb4838 0 0

ffffff800bfb3fa0 stream 0 0 0 ffffff800bfb4068 0 0

ffffff800bfb4068 stream 0 0 0 ffffff800bfb3fa0 0 0

ffffff800bfb4130 stream 0 0 0 ffffff800bfb41f8 0 0

ffffff800bfb41f8 stream 0 0 0 ffffff800bfb4130 0 0

ffffff800bf00ce8 stream 0 0 0 ffffff800bfb46a8 0 0

ffffff800bfb46a8 stream 0 0 0 ffffff800bf00ce8 0 0

ffffff800bf005e0 stream 0 0 0 ffffff800bfb4a90 0 0 /var/run/mDNSResponder

ffffff800bfb4a90 stream 0 0 0 ffffff800bf005e0 0 0

ffffff800bfb5260 stream 0 0 0 ffffff800bfb4770 0 0 /tmp/launchd-132.uZ1xpZ/sock

ffffff800bfb4770 stream 0 0 0 ffffff800bfb5260 0 0

ffffff800beffd48 stream 0 0 0 ffffff800bfb4ce8 0 0

ffffff800bfb4ce8 stream 0 0 0 ffffff800beffd48 0 0

ffffff800beff4b0 stream 0 0 0 ffffff800bfb4900 0 0

ffffff800bfb4900 stream 0 0 0 ffffff800beff4b0 0 0

ffffff800bf01bc0 stream 0 0 ffffff800d6df4d8 0 0 0 /tmp/launch-L5uCW6/org.x:0

ffffff800b4e17d0 stream 0 0 ffffff800d6df6c8 0 0 0 /tmp/launch-m6mqhA/Listeners

ffffff800b4e1708 stream 0 0 ffffff800d6df8b8 0 0 0 /tmp/launch-qj0Kgt/Apple_Ubiquity_Message

ffffff800b4e1bb8 stream 0 0 ffffff800d6dfaa8 0 0 0 /tmp/launch-crLIsJ/Render

ffffff800b4e1898 stream 0 0 ffffff800d6e0170 0 0 0 /tmp/launchd-132.uZ1xpZ/sock

ffffff800beffe10 stream 0 0 0 ffffff800bf01a30 0 0 /var/run/mDNSResponder

ffffff800bf01a30 stream 0 0 0 ffffff800beffe10 0 0

ffffff800b4e1af0 stream 0 0 0 ffffff800b4e1960 0 0

ffffff800b4e1960 stream 0 0 0 ffffff800b4e1af0 0 0

ffffff800bf014b8 stream 0 0 0 ffffff800bf01af8 0 0

ffffff800bf01af8 stream 0 0 0 ffffff800bf014b8 0 0

ffffff800b4e1190 stream 0 0 0 ffffff800bfb5968 0 0

ffffff800bfb5968 stream 0 0 0 ffffff800b4e1190 0 0

ffffff800bf00900 stream 0 0 0 ffffff800bf013f0 0 0

ffffff800bf013f0 stream 0 0 0 ffffff800bf00900 0 0

ffffff800bf00068 stream 0 0 0 ffffff800bf01d50 0 0

ffffff800bf01d50 stream 0 0 0 ffffff800bf00068 0 0

ffffff800beff3e8 stream 0 0 0 ffffff800bf010d0 0 0

ffffff800bf010d0 stream 0 0 0 ffffff800beff3e8 0 0

ffffff800bf00db0 stream 0 0 0 ffffff800beff190 0 0 /var/tmp/launchd/sock

ffffff800beff190 stream 0 0 0 ffffff800bf00db0 0 0

ffffff800bfb4e78 stream 0 0 0 ffffff800bfb5710 0 0

ffffff800bfb5710 stream 0 0 0 ffffff800bfb4e78 0 0

ffffff800beff000 stream 0 0 ffffff800c24d360 0 0 0 /var/run/pppconfd

ffffff800beff578 stream 0 0 0 ffffff800bfb5bc0 0 0 /var/tmp/launchd/sock

ffffff800bfb5bc0 stream 0 0 0 ffffff800beff578 0 0

ffffff800bf01580 stream 0 0 0 ffffff800bf002c0 0 0 /var/run/mDNSResponder

ffffff800bf002c0 stream 0 0 0 ffffff800bf01580 0 0

ffffff800bf001f8 stream 0 0 0 ffffff800bf01648 0 0

ffffff800bf01648 stream 0 0 0 ffffff800bf001f8 0 0

ffffff800bfb5c88 stream 0 0 0 ffffff800bfb5008 0 0

ffffff800bfb5008 stream 0 0 0 ffffff800bfb5c88 0 0

ffffff800bfb5e18 stream 0 0 0 ffffff800bfb5ee0 0 0

ffffff800bfb5ee0 stream 0 0 0 ffffff800bfb5e18 0 0

ffffff800beff640 stream 0 0 0 ffffff800beff708 0 0

ffffff800beff708 stream 0 0 0 ffffff800beff640 0 0

ffffff800bf00450 stream 0 0 0 ffffff800bf00518 0 0

ffffff800bf00518 stream 0 0 0 ffffff800bf00450 0 0

ffffff800bf00770 stream 0 0 0 ffffff800bf00838 0 0

ffffff800bf00838 stream 0 0 0 ffffff800bf00770 0 0

ffffff800bf00f40 stream 0 0 0 ffffff800bf01008 0 0

ffffff800bf01008 stream 0 0 0 ffffff800bf00f40 0 0

ffffff800bf018a0 stream 0 0 0 ffffff800bf01968 0 0

ffffff800bf01968 stream 0 0 0 ffffff800bf018a0 0 0

ffffff800b4e1258 stream 0 0 0 ffffff800b4e1320 0 0

ffffff800b4e1320 stream 0 0 0 ffffff800b4e1258 0 0

ffffff800b4e1578 stream 0 0 0 ffffff800b4e1640 0 0

ffffff800b4e1640 stream 0 0 0 ffffff800b4e1578 0 0

ffffff800b4e1c80 stream 0 0 0 ffffff800b4e1ed8 0 0

ffffff800b4e1ed8 stream 0 0 0 ffffff800b4e1c80 0 0

ffffff800b4e1e10 stream 0 0 0 ffffff800b4e1fa0 0 0

ffffff800b4e1fa0 stream 0 0 0 ffffff800b4e1e10 0 0

ffffff800b4e2068 stream 0 0 0 ffffff800b4e2130 0 0

ffffff800b4e2130 stream 0 0 0 ffffff800b4e2068 0 0

ffffff800b4e22c0 stream 0 0 0 ffffff800b4e21f8 0 0 /var/tmp/launchd/sock

ffffff800b4e21f8 stream 0 0 0 ffffff800b4e22c0 0 0

ffffff800b4e2450 stream 0 0 0 ffffff800b4e2388 0 0

ffffff800b4e2388 stream 0 0 0 ffffff800b4e2450 0 0

ffffff800b4e25e0 stream 0 0 0 ffffff800b4e2518 0 0

ffffff800b4e2518 stream 0 0 0 ffffff800b4e25e0 0 0

ffffff800b4e2770 stream 0 0 0 ffffff800b4e26a8 0 0

ffffff800b4e26a8 stream 0 0 0 ffffff800b4e2770 0 0

ffffff800b4e2838 stream 0 0 0 ffffff800b4e2900 0 0

ffffff800b4e2900 stream 0 0 0 ffffff800b4e2838 0 0

ffffff800b4e2a90 stream 0 0 0 ffffff800b4e29c8 0 0 /var/tmp/launchd/sock

ffffff800b4e29c8 stream 0 0 0 ffffff800b4e2a90 0 0

ffffff800b4e3328 stream 0 0 0 ffffff800b4e30d0 0 0

ffffff800b4e30d0 stream 0 0 0 ffffff800b4e3328 0 0

ffffff800b4e2b58 stream 0 0 ffffff800bb50170 0 0 0 /var/rpc/ncalrpc/wkssvc

ffffff800b4e2c20 stream 0 0 ffffff800bb50360 0 0 0 /var/rpc/ncacn_np/wkssvc

ffffff800b4e2ce8 stream 0 0 ffffff800bb50550 0 0 0 /var/rpc/ncalrpc/srvsvc

ffffff800b4e2db0 stream 0 0 ffffff800bb50740 0 0 0 /var/rpc/ncacn_np/srvsvc

ffffff800b4e2e78 stream 0 0 ffffff800bb50a28 0 0 0 /var/rpc/ncalrpc/NETLOGON

ffffff800b4e3198 stream 0 0 ffffff800bb50c18 0 0 0 /var/rpc/ncacn_np/mdssvc

ffffff800b4e2f40 stream 0 0 ffffff800bb50f00 0 0 0 /var/rpc/ncalrpc/lsarpc

ffffff800b4e3008 stream 0 0 ffffff800bb1c1f0 0 0 0 /var/rpc/ncacn_np/lsarpc

ffffff800b4e3260 stream 0 0 0 ffffff800b4e33f0 0 0

ffffff800b4e33f0 stream 0 0 0 ffffff800b4e3260 0 0

ffffff800b4e34b8 stream 0 0 0 ffffff800b4e3580 0 0

ffffff800b4e3580 stream 0 0 0 ffffff800b4e34b8 0 0

ffffff800b4e37d8 stream 0 0 ffffff800baf31f0 0 0 0 /var/tmp/launchd/sock

ffffff800b4e38a0 stream 0 0 ffffff800baf34d8 0 0 0 /private/var/run/cupsd

ffffff800b4e3968 stream 0 0 ffffff800baf35d0 0 0 0 /var/run/usbmuxd

ffffff800b4e3a30 stream 0 0 ffffff800baf36c8 0 0 0 /var/run/systemkeychaincheck.socket

ffffff800b4e3bc0 stream 0 0 ffffff800baf38b8 0 0 0 /var/run/asl_input

ffffff800b4e3c88 stream 0 0 ffffff800baf39b0 0 0 0 /var/run/portmap.socket

ffffff800b4e3d50 stream 0 0 ffffff800baf3aa8 0 0 0 /var/run/vpncontrol.sock

ffffff800b4e3ee0 stream 0 0 ffffff800baf3d90 0 0 0 /var/run/mDNSResponder

ffffff800b4e3e18 stream 0 0 ffffff800baf3e88 0 0 0 /var/run/com.apple.ActivityMonitor.socket

ffffff800dbc6ed8 dgram 0 0 0 ffffff800b4e1a28 ffffff800b4e1a28 0

ffffff800b4e1a28 dgram 0 0 0 ffffff800dbc6ed8 ffffff800dbc6ed8 0

ffffff800f8813f0 dgram 0 0 0 ffffff800f881648 ffffff800f881648 0

ffffff800f881648 dgram 0 0 0 ffffff800f8813f0 ffffff800f8813f0 0

ffffff800bf00a90 dgram 0 0 0 ffffff800bfb5328 ffffff800bfb5328 0

ffffff800bfb5328 dgram 0 0 0 ffffff800bf00a90 ffffff800bf00a90 0

ffffff800bf01710 dgram 0 0 0 ffffff800dbc8260 ffffff800dbc8260 0

ffffff800dbc8260 dgram 0 0 0 ffffff800bf01710 ffffff800bf01710 0

ffffff800dbc7388 dgram 0 0 0 ffffff800dbc7b58 ffffff800dbc7b58 0

ffffff800dbc7b58 dgram 0 0 0 ffffff800dbc7388 ffffff800dbc7388 0

ffffff800bfb3960 dgram 0 0 0 ffffff800bfb3a28 ffffff800bfb3a28 0

ffffff800bfb3a28 dgram 0 0 0 ffffff800bfb3960 ffffff800bfb3960 0

ffffff800beff258 dgram 0 0 0 ffffff800beff320 ffffff800beff320 0

ffffff800beff320 dgram 0 0 0 ffffff800beff258 ffffff800beff258 0

ffffff800beffa28 dgram 0 0 0 ffffff800beff898 ffffff800beff898 0

ffffff800beff898 dgram 0 0 0 ffffff800beffa28 ffffff800beffa28 0

ffffff800b4e10c8 dgram 0 0 0 ffffff800beffaf0 ffffff800beffaf0 0

ffffff800beffaf0 dgram 0 0 0 ffffff800b4e10c8 ffffff800b4e10c8 0

ffffff800bfb5580 dgram 0 0 0 ffffff800bfb54b8 ffffff800bfb54b8 0

ffffff800bfb54b8 dgram 0 0 0 ffffff800bfb5580 ffffff800bfb5580 0

ffffff800b4e3af8 dgram 0 0 ffffff800baf37c0 0 0 0 /var/run/syslog

iMac (21.5-inch Mid 2011), Mac OS X (10.7.5)

Posted on Sep 12, 2013 11:54 AM

30 replies

energylove Author

Level 1

1 points

Sep 12, 2013 2:00 PM in response to energylove

and that is my biggest concern. What can I do to even verify this and prevent this from happening?

Sep 12, 2013 2:28 PM in response to nbar

Hi nbar,

questions from me again, I thought the local IP was 192.168.1.3, what am I missing?

bobwild

Level 4

1,640 points

Sep 12, 2013 2:46 PM in response to energylove

Is your router WIFI using wpa2 protection? If not what is it using?

Can you display active wi-fi users on your router managment page?

Sep 12, 2013 2:53 PM in response to energylove

What wired connections do you knowingly have on your network?

bobwild

Level 4

1,640 points

Sep 12, 2013 2:59 PM in response to energylove

The 124-153 IPs do not sjhow up in your Router list. hmmm and wow! baffling.

What kind of router(s) do you have?

bobwild

Level 4

1,640 points

Sep 12, 2013 3:05 PM in response to energylove

If your netstat -a -n stilll shows lots of udp4 connections then try this to disply more informatio about them.

lsof -i udp

lsof -i tcp

(will display info about the tcp conections)

energylove Author

Level 1

1 points

Sep 12, 2013 3:08 PM in response to rack0 tack0

I have not setup a vpn....at all. That is one of the many things that seems totally off to me.

Sep 12, 2013 3:11 PM in response to energylove

Does TeamViewer use VPN?

energylove Author

Level 1

1 points

Sep 12, 2013 3:13 PM in response to rack0 tack0

it does, but, I have incoming connections deactivated.

Sep 12, 2013 3:14 PM in response to energylove

Well I will be bold and say those look OK to me

Sep 12, 2013 3:15 PM in response to energylove

Deavtivate VPN service, even with incoming connections deavtivated it may still set up the VPN on the Mac, just a thought I could be very wrong.

Sep 12, 2013 3:16 PM in response to rack0 tack0

Sorry spelling getting tired, I will leave it for tonight.

energylove Author

Level 1

1 points

Sep 12, 2013 3:26 PM in response to rack0 tack0

this helped immensely. thanks.

nbar

Level 5

7,037 points

Sep 12, 2013 3:59 PM in response to rack0 tack0

I missed something, not you. You are correct.

energylove Author

Level 1

1 points

Sep 12, 2013 4:02 PM in response to nbar

I wouldn't recommend norton to my worst enemy. Let's see how it goes. You all were very informative and helpful.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I've been repeatedly hacked multiple times this year