Пробвай така
netstat -ptan
и виж кой го е отворил
При изписване на netstat -a :
tive Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:32768 *:* LISTEN
tcp 0 0 *:ssh *:* LISTEN
При изписване на netstat -ptan
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:32768 0.0.0.0:* LISTEN 1802/artsd
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1663/sshd
tcp 0 0 192.168.17.110:32904 80.72.67.7:80 ESTABLISHED 1899/kgetDRdMUb.sla