LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-23-2006, 12:11 PM   #1
suavecu
Member
 
Registered: Dec 2005
Location: Brooklyn
Distribution: Slackware 10.2
Posts: 87

Rep: Reputation: 15
I think I've been hacked :(


I think someone is running a server off my machine. When I ask who I am I'm getting a place in california, and the name of my computer on my router isn't what I named my computer. Plus, it says that there are two connections coming from my computer. Is there anything I can do besides formatting the hard drive?
 
Old 11-23-2006, 12:12 PM   #2
suavecu
Member
 
Registered: Dec 2005
Location: Brooklyn
Distribution: Slackware 10.2
Posts: 87

Original Poster
Rep: Reputation: 15
when I run a lookup it says that my address is prisoner.iana.org Any ideas?

This is my host name:

;$

Last edited by suavecu; 11-23-2006 at 12:17 PM.
 
Old 11-23-2006, 12:33 PM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
This is not an indication your box is cracked.
It's not a Linux Security problem.
It's a local DNS problem.

Here's one of the explanations: http://lists.jammed.com/incidents/2002/09/0049.html
 
Old 11-23-2006, 01:15 PM   #4
taux
LQ Newbie
 
Registered: Dec 2005
Distribution: Ubuntu
Posts: 5

Rep: Reputation: 0
Just to make sure that you have not been hacked you can run rkhunter. (look below for a good link)

Last edited by taux; 11-23-2006 at 11:38 PM.
 
Old 11-23-2006, 04:09 PM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
No, I'm pretty sure it actually is http://rkhunter.sourceforge.net
 
Old 11-23-2006, 11:51 PM   #6
suavecu
Member
 
Registered: Dec 2005
Location: Brooklyn
Distribution: Slackware 10.2
Posts: 87

Original Poster
Rep: Reputation: 15
thanks, I'll give it whirl.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Have I been hacked? lagu2653 Linux - Security 4 11-08-2005 08:01 PM
i think i was hacked.. time112852 Linux - Security 11 11-04-2005 01:21 PM
Hacked!! vharishankar General 16 02-07-2005 08:12 AM
definitely being hacked---help!!! chongluo Linux - Security 10 12-01-2004 07:32 AM
Was I Hacked??? treedstang Linux - Security 2 05-20-2004 09:41 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:12 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration