Re: hostname changed automatically - we been hacked?
From: Randy Lawrence (jm_at_zzzzzzzzzzzz.com)
Date: Tue, 08 Jun 2004 20:12:09 GMT
johnny bobby bee wrote:
> Randy Lawrence wrote:
>> For some unknown reason, our hostname changed to '18.104.22.168' last
>> night and then reverted back to the normal hostname around 6 hours later.
>> I noticed this when I logged on because my prompt had changed. And
>> the duration was obtained by looking at the filenames used by qmail to
>> store emails in Maildir.
>> Running chkrootkit didn't show anything and there's nothing in the
>> The system didn't reboot and /etc/sysconfig/network looks normal. The
>> /var/log/* files also don't mention this strange new hostname.
>> We're running Linux. Any ideas?
> whenever i bring my laptop to a buddy's house and i fire it up on his
> cable modem my hostname changes to whatever IP address i get from the
> cable ISP. i have no idea really, why this happens, but it does. are you
> on cable?
The server is hosted with a static ip and doesn't use dhcp. This is
really strange. Still haven't tracked down the reason the hostname
changed for 6 hours.