Sample Header Ad - 728x90

What is local.blackjack from Netstat?

6 votes
2 answers
4522 views
When running netstat I noticed the suspicious name blackjack. I wonder if it's malware.
PROMPT> netstat -v
Active Internet connections
Proto Recv-Q Send-Q  Local Address          Foreign Address        (state)     rhiwat shiwat    pid   epid  state    options
tcp6       0      0  nameofmachine.local.blackjack fe80::c55b:ddf6:.13569 ESTABLISHED 131072 131072    476      0 0x0102 0x00000204
tcp6       0      0  nameofmachine.local.1024      fe80::c55b:ddf6:.1024  ESTABLISHED 131072 131072    476      0 0x0102 0x00000204
Looking up the pid 476
PROMPT> ps ax | grep 476
476   ??  S      0:19.94 /System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
So the process that owns the address seems to be identityservicesd.app, which is an Apple process. This is where my trail ends. There are other mentions of .blackjack occurring on macOS, see [this unanswered Reddit question](https://www.reddit.com/r/HomeNetworking/comments/cmj92b/blackjack_when_running_netstat/) . ### Question: What is it? Malware?
Asked by neoneye (3212 rep)
Dec 15, 2020, 03:09 PM
Last activity: May 22, 2025, 12:33 PM