해킹 당한건지 .. 함 봐주세요

22/tcp     open        ssh                    
53/tcp     open        domain                 
80/tcp     open        http                   
110/tcp    open        pop-3                  
6802/tcp   open        unknown                
8080/tcp   open        http-proxy             
35817/tcp  open        unknown                
35822/tcp  open        unknown

서버 포트 스캔 결과 입니다

지금 서비스 하고 있는건 ssh , web(apache) , named , smtp ,oracle , resin입니다

6802 ,35817 , 35822 세가지 포트가 무엇인지 백도어인지 ..

lsof | grep 6802

libhttpd.  893   root    7u  IPv4       6277                 TCP localhost.localdomain:37352->localhost.localdomain:6802 (CLOSE_WAIT)
java       908   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       935   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       936   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       937   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       938   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       939   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       940   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       941   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       942   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       943   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       944   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       945   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       946   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       951   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)
java       952   root    9u  IPv4       4725                 TCP localhost.localdomain:6802 (LISTEN)

lsof | grep 35817

oracle     882 oracle   10u  IPv4       4646                 TCP *:35817 (LISTEN) 

lsof| grep 35822

erl       905   root    0u  IPv4       4693                 TCP *:35822 (LISTEN)
java       908   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       935   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       936   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       937   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       938   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       939   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       940   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       941   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       942   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       943   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       944   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       945   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       946   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       951   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)
java       952   root    4u  IPv4       4723                 TCP localhost.localdomain:35823->localhost.localdomain:35822 (ESTABLISHED)