Hi guys, I just installed CentOS 6, LAMP, and after finishing everything I found something weird. When I type this command netstat -an I find lots of Time-wait, the foreign address are as follows: 184.72.186.1 74.125.224.79 74.125.127.103 74.125.127.106 I do not use commands that require internet connection, actually its a web server. So I have no idea my VPS visits other websites. When I type lsof -i port and it gives me nothing, I also tried netstat command with lots of variants but just could NOT find which process opened these ports? I tried some anti rootkit thing and found nothing infected, so what should I do? Is there anything wrong with my VPS? Thanks
Those are Google IP's so I do not believe Google has hacked your server netstat -anp and ps aux shows a lot more.
Neither do I , I tried netstat -anp, but there is no PID, I have no idea what is going on, could you help? Thanks