LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 09-21-2009, 12:29 PM   #1
Cartman89
LQ Newbie
 
Registered: Sep 2009
Location: Balan,Harghita,ROmania
Posts: 27

Rep: Reputation: 15
Unhappy I am hacked?


Somebody, i dont know who, hacked my external ip... when i am trying to get on my ip, 89.121.210.202 (i want to configure my router).. it directs me to a website (and after i looked good on it..its a ghost site...not 4 good)..what can i do? i want to configure my router,not to join on a site when i write in browser http://89.121.210.202
 
Old 09-21-2009, 12:32 PM   #2
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Linux Mint
Posts: 8,501

Rep: Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883
Are you sure the IP is correct?
89.121.210.202 is from romtelecom
address: Garlei 1B sector 1 013721 Bucuresti Romania

If you are behind the router you want to configure, use the private IP

Last edited by repo; 09-21-2009 at 12:36 PM.
 
Old 09-21-2009, 02:50 PM   #3
salmon913
LQ Newbie
 
Registered: Sep 2009
Posts: 4

Rep: Reputation: 0
use the local IP of the router on your network, not a public IP.
 
Old 09-22-2009, 12:40 AM   #4
Cartman89
LQ Newbie
 
Registered: Sep 2009
Location: Balan,Harghita,ROmania
Posts: 27

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by salmon913 View Post
use the local IP of the router on your network, not a public IP.
and which should be the local IP of my router? i tried 10.0.1.67 ..it gives me error...so..dont know whats wrong
 
Old 09-22-2009, 01:09 AM   #5
bharatlalgupta
Member
 
Registered: Aug 2008
Posts: 79
Blog Entries: 1

Rep: Reputation: 16
Smile https problem

i'm using multiple sites, on http
now i create certificate for https then i access my sites with diffrent name & virtual hosting. by default one first page is open with all virtual hosts name.
 
Old 09-22-2009, 04:36 AM   #6
mrclisdue
Senior Member
 
Registered: Dec 2005
Distribution: Slackware -current, 14.1
Posts: 1,047

Rep: Reputation: 170Reputation: 170
*Often* the router address is something along the lines of 192.168.x.1 . What is the output of ifconfig?

cheers,
 
Old 09-22-2009, 05:02 AM   #7
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Linux Mint
Posts: 8,501

Rep: Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883
Quote:
and which should be the local IP of my router? i tried 10.0.1.67 ..it gives me error...so..dont know whats wrong
Open a terminal
type
Code:
ifconfig
route -n
and post the output.


Is this on your local network at home?
 
Old 09-22-2009, 05:36 AM   #8
Wim Sturkenboom
Senior Member
 
Registered: Jan 2005
Location: Roodepoort, South Africa
Distribution: Slackware 10.1/10.2/12, Ubuntu 12.04, Crunchbang Statler
Posts: 3,786

Rep: Reputation: 282Reputation: 282Reputation: 282
Quote:
Originally Posted by bharatlalgupta View Post
i'm using multiple sites, on http
now i create certificate for https then i access my sites with diffrent name & virtual hosting. by default one first page is open with all virtual hosts name.
How does this help the topicstarter? Please start your own thread.
 
Old 09-22-2009, 06:19 AM   #9
Cartman89
LQ Newbie
 
Registered: Sep 2009
Location: Balan,Harghita,ROmania
Posts: 27

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by repo View Post
Open a terminal
type
Code:
ifconfig
route -n
and post the output.


Is this on your local network at home?


eth0 Link encap:Ethernet HWaddr 00:0d:87:48:45:60
inet addr:10.0.1.67 Bcast:10.255.255.255 Mask:255.0.0.0
inet6 addr: fe80::20d:87ff:fe48:4560/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:634746 errors:0 dropped:0 overruns:0 frame:0
TX packets:101780 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:247108511 (247.1 MB) TX bytes:9927031 (9.9 MB)
Interrupt:19 Base address:0xd400

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:8188 errors:0 dropped:0 overruns:0 frame:0
TX packets:8188 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:771328 (771.3 KB) TX bytes:771328 (771.3 KB)



Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 eth0
10.0.0.0 0.0.0.0 255.0.0.0 U 1 0 0 eth0
0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 eth0

First is ifconfig and second is route -n
 
Old 09-22-2009, 06:27 AM   #10
manwithaplan
Member
 
Registered: Nov 2008
Location: ~/
Distribution: Arch || Sidux
Posts: 393

Rep: Reputation: 45
I'd open a terminal and issue this command:

Code:
curl -s http://checkip.dyndns.org/ | grep -o "[[:digit:].]\+"
This should print your Public IP to your console window. Now compare this to the address your thinking was hacked. If there different, then you know the outcome.

Try using a DynDNS service for IP forwarding. This way if your IP ever changes it can always be resolved with a name. And its free.
 
Old 09-22-2009, 06:37 AM   #11
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Linux Mint
Posts: 8,501

Rep: Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883
Quote:
0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 eth0
Your router should be at
10.0.0.1

However
Are yu connecting to your router at your home network from your home network?
Or are you connecting to your router at your home network from your work or another place?
 
Old 09-22-2009, 06:42 AM   #12
Cartman89
LQ Newbie
 
Registered: Sep 2009
Location: Balan,Harghita,ROmania
Posts: 27

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by manwithaplan View Post
I'd open a terminal and issue this command:

Code:
curl -s http://checkip.dyndns.org/ | grep -o "[[:digit:].]\+"
This should print your Public IP to your console window. Now compare this to the address your thinking was hacked. If there different, then you know the outcome.

Try using a DynDNS service for IP forwarding. This way if your IP ever changes it can always be resolved with a name. And its free.

curl -s http://checkip.dyndns.org/ | grep -o "[[:digit:].]\+"
89.121.210.202


i my ip isnt changing..is always this.. but i tried this..somebody hacked it..it connects me to a sports site :|
 
Old 09-22-2009, 06:44 AM   #13
Cartman89
LQ Newbie
 
Registered: Sep 2009
Location: Balan,Harghita,ROmania
Posts: 27

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by repo View Post
Your router should be at
10.0.0.1

However
Are yu connecting to your router at your home network from your home network?
Or are you connecting to your router at your home network from your work or another place?
i tried 10.0.0.1 ..shit..it connects me to the site..showing how much i must pay at internet..download programs (for windows)..and how much i must pay at internet..or how much i payed... so..dunno
 
Old 09-22-2009, 06:47 AM   #14
manwithaplan
Member
 
Registered: Nov 2008
Location: ~/
Distribution: Arch || Sidux
Posts: 393

Rep: Reputation: 45
Check your hosts file. See if there is any forwarding info. As repo suggested, configure the router with filtering. Also host your sites on the local ip range, if used for internel use only.
 
Old 09-22-2009, 06:48 AM   #15
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Linux Mint
Posts: 8,501

Rep: Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883Reputation: 883
What do you see when you type
127.0.0.1
in the browser ?

Is this your home network?


Perhaps there is a routing issue with your provider.
I would suggest to contact them.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
think i got hacked phatbastard Linux - Security 7 12-01-2007 01:36 PM
Was my PC hacked? the-iguana Linux - Security 4 04-07-2006 08:38 AM
Am I being Hacked ? rizhun Linux - Security 4 09-07-2005 08:08 AM
Have I been HACKED?? fenice1976 Linux - Software 3 07-05-2004 08:00 PM
Got Hacked - What can I do? cli_man Linux - Security 5 12-22-2003 05:06 PM


All times are GMT -5. The time now is 09:49 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration