I think I've been hacked :(

suavecu · 11-23-2006, 01:11 PM

I think someone is running a server off my machine. When I ask who I am I'm getting a place in california, and the name of my computer on my router isn't what I named my computer. Plus, it says that there are two connections coming from my computer. Is there anything I can do besides formatting the hard drive?

suavecu · 11-23-2006, 01:12 PM

when I run a lookup it says that my address is prisoner.iana.org

Any ideas?

This is my host name:

;Ð$Ê

unSpawn · 11-23-2006, 01:33 PM

This is not an indication your box is cracked.
It's not a Linux Security problem.
It's a local DNS problem.

Here's one of the explanations: http://lists.jammed.com/incidents/2002/09/0049.html

taux · 11-23-2006, 02:15 PM

Just to make sure that you have not been hacked you can run rkhunter. (look below for a good link)

unSpawn · 11-23-2006, 05:09 PM

No, I'm pretty sure it actually is http://rkhunter.sourceforge.net

suavecu · 11-24-2006, 12:51 AM

thanks, I'll give it whirl.