I think I've been hacked :(

suavecu · 11-23-2006, 12:11 PM

I think someone is running a server off my machine. When I ask who I am I'm getting a place in california, and the name of my computer on my router isn't what I named my computer. Plus, it says that there are two connections coming from my computer. Is there anything I can do besides formatting the hard drive?

suavecu · 11-23-2006, 12:12 PM

when I run a lookup it says that my address is prisoner.iana.org

Any ideas?

This is my host name:

;Ð$Ê

unSpawn · 11-23-2006, 12:33 PM

This is not an indication your box is cracked.
It's not a Linux Security problem.
It's a local DNS problem.

Here's one of the explanations: http://lists.jammed.com/incidents/2002/09/0049.html

taux · 11-23-2006, 01:15 PM

Just to make sure that you have not been hacked you can run rkhunter. (look below for a good link)

unSpawn · 11-23-2006, 04:09 PM

No, I'm pretty sure it actually is http://rkhunter.sourceforge.net

suavecu · 11-23-2006, 11:51 PM

thanks, I'll give it whirl.