Security Incidents mailing list archives

Unusual Netstat Listing

From: rdm () MWCI NET (Rob)
Date: Sat, 22 Jan 2000 15:20:26 -0600


I'm not sure if this means anything or not, but it's rather odd and
something I haven't seen before. When I run a NETSTAT I'm getting these
odd readings that say the following:

javascript-of-unknown-origin.netscape.com:0 LISTENING

This is listed on about 5 various ports. This seems odd to me as it's
never shown up before. What's even odder is that this shows up even
after a clean boot, without running Netscape or even being online. Does
anyone know what this is?

Rob.

Current thread:

Re: Korea (was RE: ?), (continued)
- - - Re: Korea (was RE: ?) Dug Song (Jan 28)
    - Re: Korea (was RE: ?) Patrick Oonk (Jan 28)
    - DNS update queries: another sort of suspicious activity. Fyodor (Jan 28)
    - Re: DNS update queries: another sort of suspicious activity. Patrick Oonk (Jan 28)
    - Re: DNS update queries: another sort of suspicious activity. Fyodor (Jan 28)
    - Re: DNS update queries: another sort of suspicious activity. Patrick Oonk (Jan 28)
    - Recent Scans Edwin Covert (Jan 28)
    - Re: DNS update queries: another sort of suspicious activity. Rob Quinn (Jan 31)
    - Re: Socks port 1080 Randy Mclean (Jan 21)
    - Re: Socks port 1080 Richard Bejtlich (Jan 21)
    - Unusual Netstat Listing Rob (Jan 22)