Results 1 to 2 of 2
I am running Ubuntu 12.04 lts 32 bit. Just recently installed GUFW. I have been checking to see if someone is trying to hack into my computer. This is what ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
- 12-05-2012 #1
- Join Date
- Dec 2012
Help with geoip
I am running Ubuntu 12.04 lts 32 bit. Just recently installed GUFW. I have been checking to see if someone is trying to hack into my computer. This is what I have found so far.
I ran these few commands and these are the results.
First I ran:
netstat -anp | grep -e tcp -e udp
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 1760/dnsmasq
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1061/cupsd
tcp 1 0 192.168.1.100:33937 22.214.171.124:80 CLOSE_WAIT 2022/ubuntu-geoip-p
tcp6 0 0 ::1:631 :::* LISTEN 1061/cupsd
udp 0 0 127.0.0.1:53 0.0.0.0:* 1760/dnsmasq
udp 0 0 0.0.0.0:68 0.0.0.0:* 1055/dhclient
I want to know who this (192.168.1.100:33937)
and I find:
tcp 1 0 192.168.1.100:33937 mulberry.canonical:http CLOSE_WAIT 2022/ubuntu-geoip-p
I don't know who this (mulberry.cononical:http) is or what (ubuntu-geoip-p) is either.
I have found some sites that show you how to disable the (geoip) program. I have not found any definitive answer as to what happens if you disable it. Is it good or bad
for linux? Does it even matter if its running or not? It is listed as closed_wait, so I guess there is no information being sent back and forth. I could be wrong.
Thanks in advance for any information you can give.
- 12-05-2012 #2
- Join Date
- Jan 2005
- Saint Paul, MN