Sponsored Content
Special Forums Cybersecurity Maybe a security problem involving Linux hosts Post 302980273 by SInt on Thursday 25th of August 2016 03:42:13 PM
Old 08-25-2016
Maybe a security problem involving Linux hosts

Hello,

with the following problem I feel helpless because I do not know where to look for the problem.
Sorry in advance for my poor English.

At some point the interaction with people on Freenode IRC has become mysterious and offending so that I checked my modem/router device. When I tried to make a change the modem gave me the error message that another admin is logged in. It alerted me because all other computers were disconnected. So I called my ISP and they agreed that my device is listed there at "being attacked". They sent me a replacement and they also sent me a new password.

With the new modem I booted a linux livecd that i got from a linux magazine. And from there I downloaded the ISOs and wiped all my machines using DBAN.

With all the people in my social environment telling me to relax, think positive and all that stuff like "its only your false perceiption on things" I stopped paying attention on mysterious errors, etc. Until I needed the Hexchat client to check a local ircd install. And it launched with 1 network added. I am absolutely sure I had 0 networks in that network list when I went on an IRC break. Several months before there was a similar thing where all 18 or 19 networks had their name changed to EF-Net.

Another thing is that I stored all my website passwords in Lastpass and when I went offline for 3 days to install and configure some things my passphrase was changed to the one I used several months ago and all my stored passwords were deleted.

I could provide several more of these stories.

I hope none of you guys reacts now how most people reacted: "this guy is crazy, give him more meds" or something. I know it sounds crazy and it is crazy. But lets say my observations are correct where could the entry point be for an attacker?


friendly Greetings,
SInt
 

6 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

remote hosts access problem on solaris

hey guys, i am on a box named pluto and i need to be able to log into another box named genesis. i need to be able to ssh into genesis as root and not get asked for the password. what file do i need to edit on genesis to make this happen? i searched for the .rhosts file it doesn't seem to exist.... (1 Reply)
Discussion started by: Terrible
1 Replies

2. UNIX for Dummies Questions & Answers

problem in script involving month arithmetic

advance happy new year to all, i am having a script.The purpose of the scripts is as follows.If the current month is march,june,september or december ,inc_flg should be set to '1' otherwise inc_flg should be set to '2' month= date +"%m" if || || || ; then inc_flg = 1 else ... (6 Replies)
Discussion started by: rajarp
6 Replies

3. Programming

A challenging problem involving symbolic links.

Hello, I'm working on an application that bridges together several applications involved in creating a video workflow for editing with digital cinema cameras. The main platform is MacOSX. Because of the nature of some of the utilities for working with this video footage I must spoof filenames... (2 Replies)
Discussion started by: ibloom
2 Replies

4. Shell Programming and Scripting

problem feeding netcat a list of hosts

Hi, I'm having difficulty in making a bash script to get netcat to scan a list of hosts and their ports from another file and could use some help. Here's an example host list, "nc.host": 192.168.2.110 22 And here's the first script I tried to feed "nc.host" into netcat: "nc1.sh" ... (3 Replies)
Discussion started by: seanovision
3 Replies

5. Shell Programming and Scripting

Problem in expect script with password involving trailing backslash

Hi all, I have wriiten an expect script that genearates a public private key pair through ssh-keygen and then copies that key to the authorized keys file of the remote system . The problem i am facing is when i get a password for the remote machine containg a trailing backslash , the send command... (4 Replies)
Discussion started by: pradeeptyagi23
4 Replies

6. Solaris

How to copy a tar file on a series of remote hosts and untar it on those hosts?

Am trying to copy a tar file onto a series of remote hosts and untar it at the destination. Need to do this without having to do multiple ssh. Actions to perform within a single ssh session via shell script - copy a file - untar at destination (remote host) OS : Linux RHEL6 (3 Replies)
Discussion started by: sankasu
3 Replies
IRCD(8) 						      System Manager's Manual							   IRCD(8)

NAME
ircd - The Undernet Internet Relay Chat Daemon SYNOPSIS
ircd [-t] [-d directory] [-f configfile] [-x debuglevel] [-h hostname] DESCRIPTION
ircd is the Undernet Internet Relay Chat daemon. ircd is a server in that its function is to "serve" the client program irc(1) with messages and commands. All commands and user messages are passed directly to ircd for processing and relaying to other servers. irc(1) depends upon there being an ircd server running somewhere for it to connect to and thus allow the user to begin talking to other users. There are many common clients including ircII, EPIC, and BitchX for UNIX, mIRC and pIRCh for Windows, and IRCle and Homer for the Macintosh. OPTIONS
-d directory This option tells the server to change to that directory and use that as a reference point when opening ircd.conf and other startup files. -t Instructs the server run in the foreground and to direct debugging output to standard output. -x# Defines the debug level for ircd. The higher the debug level, the more messages get directed to debugging file (or standard output if the -t option is used). -w interface This option is deprecated. Outgoing connections are bound to the interface specified in the M: line, and incoming connections are accepted only on interfaces specified in the P: lines. -f filename Specifies the ircd.conf file to be used for this server. The option is used to override the default ircd.conf given at compile time. -c This flag must be given if you are running ircd from /dev/console or any other situation where fd 0 isn't a TTY and you want the server to fork off and run in the background. This needs to be given if you are starting ircd from an rc (such as /etc/rc.local) file. -h hostname Allows the user to manually set the server name at startup. The default name is hostname.domainname. -p portname This is deprecated in favor of specifying server ports in P: lines. CONFIGURATION
If you plan to connect your ircd server to an existing IRC network, you will need to alter your local ircd configuration file (typically named ircd.conf) so that it will accept and make connections to other IRC servers. This file contains the hostnames, network addresses, and passwords for connections to other IRC servers around the world. Because the description of the ircd.conf file is beyond the scope of this document, please refer to the INSTALL file in the ircd documentation directory. BOOTING THE SERVER: The ircd server can be started as part of the UNIX boot procedure or just by placing the server into Unix Background. Keep in mind that if it is *not* part of your UNIXES Boot-up procedure then you will have to manually start the ircd server each time your UNIX is rebooted. This means if your UNIX is prone to crashing or going for for repairs a lot it would make sense to start the ircd server as part of your UNIX bootup procedure. In some cases the irc(1) will automatically attempt to boot the ircd server if the user is on the SAME UNIX that the ircd is supposed to be running on. If the irc(1) cannot connect to the ircd server it will try to start the server on it's own and will then try to reconnect to the newly booted ircd server. EXAMPLE
tolsun% ircd Places ircd into UNIX Background and starts up the server for use. Note: You do not have to add the "&" to this command, the program will automatically detach itself from tty. COPYRIGHT
(c) 1988,1989 University of Oulu, Computing Center, Finland, (c) 1988,1989 Department of Information Processing Science, University of Oulu, Finland (c) 1988,1989,1990,1991 Jarkko Oikarinen For full COPYRIGHT see LICENSE file with IRC package. FILES
/etc/utmp "ircd.conf" SEE ALSO
irc(1) BUGS
See the file 'BUGS' included in the distribution. AUTHOR
The current authors of the undernet IRC daemon are coder-com@undernet.org, the original author was Jarkko Oikarinen. 10 July 2000 IRCD(8)
All times are GMT -4. The time now is 07:31 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy