What's new

Is this IP legit?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Leo Martin Lim

Occasional Visitor
Hi everyone,

Below is the snippets of output of netstat-nat -Ln from my router. I am trying to investigate hacker intrusion myself. (and still learning).
is IP address 44.233.111.149 legit? i have seen this twice connecting. what is it for, if it is legit?
94.140.x.x are my adguard dns servers setting.

i believed check signature and check firmware update connect to 152.199.43.245 and 104.21.36.15 respectively.
i hope i have found something here....

thanks in advance guys...
===Martin.


===============================================================================


babingepetlu@RT-AX56U-ECE0:/tmp/home/root# netstat-nat -Ln
Proto Source Address Destination Address State
igmp 192.168.50.1 224.0.0.1 UNREPLIED
tcp 111.95.158.157:46819 94.140.14.14:853 TIME_WAIT
tcp 111.95.158.157:46810 94.140.14.14:853 TIME_WAIT
tcp 111.95.158.157:46796 94.140.14.14:853 TIME_WAIT
tcp 111.95.158.157:59882 94.140.15.15:853 TIME_WAIT
tcp 111.95.158.157:41555 44.233.111.149:443 ESTABLISHED
tcp 111.95.158.157:59870 94.140.15.15:853 TIME_WAIT
tcp 111.95.158.157:59896 94.140.15.15:853 TIME_WAIT
tcp 111.95.158.157:46804 94.140.14.14:853 TIME_WAIT
tcp 111.95.158.157:59875 94.140.15.15:853 TIME_WAIT
tcp 111.95.158.157:41553 44.233.111.149:443 CLOSE
tcp 111.95.158.157:46826 94.140.14.14:853 ESTABLISHED
tcp 127.0.0.1:54797 127.0.0.1:8888 TIME_WAIT
tcp 127.0.0.1:54771 127.0.0.1:8888 TIME_WAIT
.....
 

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top