I am trying to figure out how to get IP of a suspicious access point I am using to access the internet. Running netstat
, I get the following:
$ netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default XX.100.43.65 UGSc 24 0 en1
YYY.37.129/24 link#8 UC 2 0 vnic1
YYY.37.129.2 0:1c:42:0:0:9 UHLWI 1 1 lo0
YYY.37.129.255 ff:ff:ff:ff:ff:ff UHLWbI 0 15 vnic1
YYY.211.55/24 link#7 UC 2 0 vnic0
YYY.211.55.2 0:1c:42:0:0:8 UHLWI 0 1 lo0
YYY.211.55.25 ff:ff:ff:ff:ff:ff UHLWbI 0 14 vnic0
127 127.0.0.1 UCS 0 0 lo0
127.0.0.1 127.0.0.1 UH 0 410025 lo0
169.254 link#5 UCS 0 0 en1
XX.100.43.64/26 link#5 UCS 2 0 en1
XX.100.43.65 0:4:28:f2:60:0 UHLWI 24 0 en1 1198
XX.100.43.70 127.0.0.1 UHS 0 0 lo0
XX.100.43.127 ff:ff:ff:ff:ff:ff UHLWbI 0 12 en1
where
- XX.100.43.65 (or for short IP.65) is the ISP's router
- IP.70 is me (static address)
- IP.127 - I don't know who, no ports are open. It disappears from time to time.
Is there the AP data, and what is IP.127
considering its flags and gateway?