Hello,
Please, someone help me.
If this is not the right forum please tell me which could it be.
I run this server on Win 2000 server, when I run Netstat I always see connections established involving ldap.
Am I being hacked and someone is using my server to send spam?.
Server name: PPSERVER2K
Dominium: plastic-plumbers.com.mx
Netstat listing follows:
Active Connections
Proto Local Address Foreign Address State
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:1078 ESTABLISHED
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:1080 ESTABLISHED
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:1081 ESTABLISHED
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:1084 ESTABLISHED
TCP PPSERVER2K:1037 PPSERVER2K.plastic-plumbers.com.mx:ldap CLOSE_WAIT
TCP PPSERVER2K:1078 PPSERVER2K.plastic-plumbers.com.mx:ldap ESTABLISHED
TCP PPSERVER2K:1080 PPSERVER2K.plastic-plumbers.com.mx:ldap ESTABLISHED
TCP PPSERVER2K:1081 PPSERVER2K.plastic-plumbers.com.mx:ldap ESTABLISHED
TCP PPSERVER2K:1084 PPSERVER2K.plastic-plumbers.com.mx:ldap ESTABLISHED
TCP PPSERVER2K:ldap PP22:4314 TIME_WAIT
TCP PPSERVER2K:ldap PP22:4315 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:1054 ESTABLISHED
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2124 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2125 ESTABLISHED
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2129 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2130 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2135 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2136 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2140 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2141 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2154 TIME_WAIT
TCP PPSERVER2K:ldap PPSERVER2K.plastic-plumbers.com.mx:2155 TIME_WAIT
TCP PPSERVER2K:microsoft-ds PP10:4369 ESTABLISHED
TCP PPSERVER2K:microsoft-ds PPSERVER2K.plastic-plumbers.com.mx:1204 ESTABLISHED
TCP PPSERVER2K:1026 PPSERVER2K.plastic-plumbers.com.mx:1056 ESTABLISHED
TCP PPSERVER2K:1026 PPSERVER2K.plastic-plumbers.com.mx:1209 ESTABLISHED
TCP PPSERVER2K:1054 PPSERVER2K.plastic-plumbers.com.mx:ldap ESTABLISHED
TCP PPSERVER2K:1056 PPSERVER2K.plastic-plumbers.com.mx:1026 ESTABLISHED
TCP PPSERVER2K:1204 PPSERVER2K.plastic-plumbers.com.mx:microsoft-ds ESTABLISHED
TCP PPSERVER2K:1209 PPSERVER2K.plastic-plumbers.com.mx:1026 ESTABLISHED
TCP PPSERVER2K:1823 PPSERVER2K.plastic-plumbers.com.mx:ldap CLOSE_WAIT
TCP PPSERVER2K:2121 PPSERVER2K.plastic-plumbers.com.mx:epmap TIME_WAIT
TCP PPSERVER2K:2122 PPSERVER2K.plastic-plumbers.com.mx:1026 TIME_WAIT
TCP PPSERVER2K:2125 PPSERVER2K.plastic-plumbers.com.mx:ldap ESTABLISHED
TCP PPSERVER2K:2126 PPSERVER2K.plastic-plumbers.com.mx:epmap TIME_WAIT
TCP PPSERVER2K:2127 PPSERVER2K.plastic-plumbers.com.mx:1026 TIME_WAIT
TCP PPSERVER2K:2131 PPSERVER2K.plastic-plumbers.com.mx:epmap TIME_WAIT
TCP PPSERVER2K:2132 PPSERVER2K.plastic-plumbers.com.mx:1026 TIME_WAIT
TCP PPSERVER2K:2138 PPSERVER2K.plastic-plumbers.com.mx:epmap TIME_WAIT
TCP PPSERVER2K:2139 PPSERVER2K.plastic-plumbers.com.mx:1026 TIME_WAIT
TCP PPSERVER2K:2144 DEL0000F0A2ACEA:http TIME_WAIT
TCP PPSERVER2K:2146 DEL0000F0A2ACEA:http TIME_WAIT
TCP PPSERVER2K:2152 PPSERVER2K.plastic-plumbers.com.mx:epmap TIME_WAIT
TCP PPSERVER2K:2153 PPSERVER2K.plastic-plumbers.com.mx:1026 TIME_WAIT
TCP PPSERVER2K:3389 dsl-189-141-19-90.prod-infinitum.com.mx:1595 ESTABLISHED
– – – – – – – – – – –
This remote connection is mine from home.
Thanks in advance,
Oscar Torres
