I think i'm being hacked

rhubarbdog · 08-10-2018, 03:56 AM

hi,
I'm running linux mint 18.2 64 bit edition
Today i decided to tidy my wifi connections i'v just recently ended a contract with one supplier and no longer run their kit.
when i clicked 'edit network conections' which is on the menu which pops up if you click the network signal strength status bar icon.
I listed a wired ethernet connection 1 hour ago
i went out for half an hour this morning
how do i discover who's using my computer, what log files etc do i need to check

thanks

Keruskerfuerst · 08-10-2018, 04:22 AM

The log files of Linux are stored under /var/log.

Begin there.

lazydog · 08-10-2018, 09:50 AM

Look at messages and secure logs to see who is logging in. If these users know what they are doing you are not going to see anything in these files as they will hide their activity.

Best you can do if you are not sure is wipe and reinstall from scratch.

frankbell · 08-10-2018, 08:33 PM

You might also want to look at your router settings and install fail2ban. Fail2ban should be in your repos.

ondoho · 08-11-2018, 04:50 AM

Quote:

Originally Posted by rhubarbdog

I listed a wired ethernet connection 1 hour ago
i went out for half an hour this morning

are you implying someone hacked your wired connection?

rhubarbdog · 08-11-2018, 05:16 AM

I'm unsure. I thought someone has accessed my laptop and plugged their wire in.

TB0ne · 08-11-2018, 10:36 AM

Quote:

Originally Posted by rhubarbdog

I'm unsure. I thought someone has accessed my laptop and plugged their wire in.

So why ask here, then? Should be a pretty short list of people who have access to your house, and could be able to get in while you're out. And really...why bother? So they can plug it into your Internet (or other) router? Again, why, when they had access to your home and computer, did they not just plug in a thumbdrive, copy EVERYTHING, and leave???

ChuangTzu · 08-11-2018, 07:40 PM

Quote:

Originally Posted by rhubarbdog

I'm unsure. I thought someone has accessed my laptop and plugged their wire in.

Good Lord, if this is true then you have bigger problems to worry about, like better locks/dead bolts/alarms/cameras etc...

https://images.duckduckgo.com/iu/?u=...D001_0.jpg&f=1

frankbell · 08-11-2018, 08:06 PM

If it's physical access you fear, change your passwords and either shut the machine off or log out and lock the screen whenever you are not sitting in front of it.