nmap Xmas scans and unrecognized outcoming connections

3 msg	Debian suggestion on File Deletion
2 msg	Squid Proxy Cache Security Update Advisory SQUI...
6 msg	Re: [SECURITY] [DSA 1430-1] New libnss-ldap pac...
4 msg	Re: [SECURITY] [DSA 1481-1] New Linux 2.6.18 pa...
8 msg	Re: [SECURITY] [DSA 1422-1] New e2fsprogs packa...

nmap Xmas scans and unrecognized outcoming conn...
\ Martķn Peluso (7 Dec 2007)
. \ Maximilian Wilhelm (7 Dec 2007)

1 msg	Export business of electrical equipments (pleas...
3 msg	'Debian hardened' ;-)
1 msg	(intet emne)
1 msg	Chatting online
1 msg	Daniel Pressler/Heilbronn/Bechtle-Gruppe/DE ist...
2 msg	Re: [SECURITY] [DSA 1409-2] New samba packages ...
1 msg	Re: [SECURITY] [DSA 1400-1] New perl packages f...
2 msg	Permission changes with rsync
3 msg	[SECURITY] [DSA 1409-1] New samba packages fix ...
1 msg	this bug/#438871 - jabber: do not run as group:adm
1 msg	Re: Security Servers down ???
4 msg	QA needed for insecure LD_LIBRARY_PATH in many ...
1 msg	Oldrich Melski je mimo kancelįų.
2 msg	Re: perl regex vulnerability - debian - pcre only?

Subject:	nmap Xmas scans and unrecognized outcoming connections
Group:	Debian-security
From:	Martķn Peluso
Date:	7 Dec 2007

Hello everybody

Two days ago one of my machines started to receive several nmap Xmas
scans from 73.23.32.79. Later, in another machine which is running under
Debian etch, Firestarter showed me four outcoming connections to the
same ip address with destination ports 80, 44285, 41182 and 43275. Those
connections are not used by any client application and they are not
recognized by netstat. In addition, the target ip address (a comcast
range address) don't seem to be giving http access, and it have all of
its ports filtered.
I don't know how to proceed in order to determine what application is
using those connections or what are they used for. They are still active
since two days ago.
Any suggestion?

Thanks in advance.

Martin Peluso

--
To UNSUBSCRIBE, email to debian-security-REQUEST
with a subject of "unsubscribe". Trouble? Contact listmaster