On Nov 26, 2007 8:06 PM, PowerBSD <[EMAIL PROTECTED]> wrote:
> On Tue, Nov 27, 2007 at 01:45:01PM +1100, RW wrote:
> > On Tue, 27 Nov 2007 10:14:43 +0800, PowerBSD wrote:
> >
> > >I use ssh connect to remote sshd server 192.168.1.191 , then i us
> > >
> > ># ssh 192.168.1.1911
> >
> > Stop right there!
> > What the hell does that 1911 mean? and all the 1912, 1913 etc stuff
> > too.
> > Those are not valid addresses, at least in the IPv4 universe.
...
> all these illegal address should return an error , but result connect another
> address.

That just means your /etc/hosts file or DNS server has entries doing
that mapping.  If you (or your sysadmin?) didn't add them, then
someone is probably screwing with you.  So, check /etc/hosts for lines
like

202.102.2.116 192.168.1.1918

Important note!  If the IP 202.102.2.116 isn't under your control,
then you have given your password to someone you probably don't trust!

2.102.202.in-addr.arpa. 3600    IN      SOA     nmc1.ptt.js.cn.
postmaster.nmc1.ptt.js.cn. 2006110800 86400 7200 2592000 3600

If you aren't in China, then I would *strongly* suggest scrubbing and
reinstalling your system.

...and then tracking down how you got hacked.


Philip Guenther

Reply via email to