Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Updated to Mavericks. Now theres tons of activity in my terminal and my activity monitor doesn't seem normal. I want to think someone's hacking me, but i need experienced help please!

I spent all night trying to fix this. It seems to me that someone has been trying to hack into my system with all of the random codes/lines in my terminal and i have all of his foreign IP addresses. And now i get this strange message that popped up in my terminal. Idk what it entirely means? I would very appreciate if someone could just walk me through this. Thank you very much.




First time poster. I have Macbook Pro. OSX. Just downloaded the new mavericks. I'm i have my firewall on. I stay secure. I run Netbarrier, Virusbarrier, IdentityScrubber.

I know something is a little odd or just doesn't make since about my activity monitor. Then my WiFi was hacked last night and this person was writing tons lines of commands/codes that i found in my terminal and my activity monitor doesn't look normal, and I've only been a mac owner for about a year now and i'm learning more and more but while trying to figure out what was going on this message popped up which concerned me the most. Any help would be most appreciated, thanks guys. I have my terminal full of his foreign ip addresses i noticed, and a lot of other commands and lines he wrote out that i definitely did not type myself. Can anyone give me a hand on this? Thanks


--- 192.168.1.103 ping statistics ---

10 packets transmitted, 0 packets received, 100.0% packet loss

Extol:~ FBI$ who

FBI console Nov 7 02:14

FBI ttys000 Nov 7 04:33

Extol:~ FBI$ whois

usage: whois [-aAbdgiIlmQrR6] [-c country-code | -h hostname] [-p port] name ...

Extol:~ FBI$ whois 192.168.1.103


#

# ARIN WHOIS data and services are subject to the Terms of Use

# available at: https://www.arin.net/whois_tou.html

#



#

# Query terms are ambiguous. The query is assumed to be:

# "n 192.168.1.103"

#

# Use "?" to get help.

#


#

# The following results may also be obtained via:

# http://whois.arin.net/rest/nets;q=192.168.1.103?showDetails=true&showARIN=false& ext=netref2

#


NetRange: 192.168.0.0 - 192.168.255.255

CIDR: 192.168.0.0/16

OriginAS:

NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED

NetHandle: NET-192-168-0-0-1

Parent: NET-192-0-0-0-0

NetType: IANA Special Use

Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.

Comment:

Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers

Comment:

Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:

Comment: http://datatracker.ietf.org/doc/rfc1918

RegDate: 1994-03-15

Updated: 2013-08-30

Ref: http://whois.arin.net/rest/net/NET-192-168-0-0-1


OrgName: Internet Assigned Numbers Authority


RegDate:

Updated: 2012-08-31

Ref: http://whois.arin.net/rest/org/IANA


OrgTechHandle: IANA-IP-ARIN

OrgTechName: Internet Corporation for Assigned Names and Number

OrgTechPhone:

OrgTechEmail:

OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN


OrgAbuseHandle: IANA-IP-ARIN

OrgAbuseName: Internet Corporation for Assigned Names and Number

OrgAbusePhone

OrgAbuseEmail:

OrgAbuseRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN



#

# ARIN WHOIS data and services are subject to the Terms of Use

# available at: https://www.arin.net/whois_tou.html

#


Extol:~ FBI$

Extol:~ FBI$ hosts

-bash: hosts: command not found

Extol:~ FBI$ who

FBI console Nov 7 02:14

FBI ttys000 Nov 7 04:33

Extol:~ FBI$ whois

usage: whois [-aAbdgiIlmQrR6] [-c country-code | -h hostname] [-p port] name ...

Extol:~ FBI$ whois 192.168.0.0 - 192.168.255.255


#

# ARIN WHOIS data and services are subject to the Terms of Use

# available at: https://www.arin.net/whois_tou.html

#



#

# Query terms are ambiguous. The query is assumed to be:

# "n 192.168.0.0"

#

# Use "?" to get help.

#


#

# The following results may also be obtained via:

# http://whois.arin.net/rest/nets;q=192.168.0.0?showDetails=true&showARIN=false&ex t=netref2

#


NetRange: 192.168.0.0 - 192.168.255.255

CIDR: 192.168.0.0/16

OriginAS:

NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED

NetHandle: NET-192-168-0-0-1

Parent: NET-192-0-0-0-0

NetType: IANA Special Use

Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.

Comment:

Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers

Comment:

Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:

Comment: http://datatracker.ietf.org/doc/rfc1918

RegDate: 1994-03-15

Updated: 2013-08-30

Ref: http://whois.arin.net/rest/net/NET-192-168-0-0-1


OrgName: Internet Assigned Numbers Authority

OrgId: IANA


Updated: 2012-08-31

Ref: http://whois.arin.net/rest/org/IANA


OrgTechHandle: IANA-IP-ARIN

OrgTechName: Internet Corporation for Assigned Names and Number

OrgTechPhone:

OrgTechEmail

OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN


OrgAbuseHandle: IANA-IP-ARIN

OrgAbuseName: Internet Corporation for Assigned Names and Number

OrgAbusePhone:

OrgAbuseEmail:

OrgAbuseRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN



#

# ARIN WHOIS data and services are subject to the Terms of Use

# available at: https://www.arin.net/whois_tou.html

#



Whois Server Version 2.0


Domain names in the .com and .net domains can now be registered

with many different competing registrars. Go to http://www.internic.net

for detailed information.


No match for "-".

>>> Last update of whois database: Thu, 07 Nov 2013 13:19:14 UTC <<<


NOTICE: The expiration date displayed in this record is the date the

registrar's sponsorship of the domain name registration in the registry is

currently set to expire. This date does not necessarily reflect the expiration

date of the domain name registrant's agreement with the sponsoring

registrar. Users may consult the sponsoring registrar's Whois database to

view the registrar's reported date of expiration for this registration.


TERMS OF USE: You are not authorized to access or query our Whois

database through the use of electronic processes that are high-volume and

automated except as reasonably necessary to register domain names or

modify existing registrations; the Data in VeriSign Global Registry

Services' ("VeriSign") Whois database is provided by VeriSign for

information purposes only, and to assist persons in obtaining information

about or related to a domain name registration record. VeriSign does not

guarantee its accuracy. By submitting a Whois query, you agree to abide

by the following terms of use: You agree that you may use this Data only

for lawful purposes and that under no circumstances will you use this Data

to: (1) allow, enable, or otherwise support the transmission of mass

unsolicited, commercial advertising or solicitations via e-mail, telephone,

or facsimile; or (2) enable high volume, automated, electronic processes

that apply to VeriSign (or its computer systems). The compilation,

repackaging, dissemination or other use of this Data is expressly

prohibited without the prior written consent of VeriSign. You agree not to

use electronic processes that are automated and high-volume to access or

query the Whois database except as reasonably necessary to register

domain names or modify existing registrations. VeriSign reserves the right

to restrict your access to the Whois database in its sole discretion to ensure

operational stability. VeriSign may restrict or terminate your access to the

Whois database for failure to abide by these terms of use. VeriSign

reserves the right to modify these terms at any time.


The Registry database contains ONLY .COM, .NET, .EDU domains and

Registrars.


#

# ARIN WHOIS data and services are subject to the Terms of Use

# available at: https://www.arin.net/whois_tou.html

#



#

# Query terms are ambiguous. The query is assumed to be:

# "n 192.168.255.255"

#

# Use "?" to get help.

#


#

# The following results may also be obtained via:

# http://whois.arin.net/rest/nets;q=192.168.255.255?showDetails=true&showARIN=fals e&ext=netref2

#


NetRange: 192.168.0.0 - 192.168.255.255

CIDR: 192.168.0.0/16

OriginAS:

NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED

NetHandle: NET-192-168-0-0-1

Parent: NET-192-0-0-0-0

NetType: IANA Special Use

Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.

Comment:

Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers

Comment:

Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:

Comment: http://datatracker.ietf.org/doc/rfc1918

RegDate: 1994-03-15

Updated: 2013-08-30

Ref: http://whois.arin.net/rest/net/NET-192-168-0-0-1


OrgName: Internet Assigned Numbers Authority

OrgId: IANA


RegDate:

Updated: 2012-08-31

Ref: http://whois.arin.net/rest/org/IANA


OrgTechHandle: IANA-IP-ARIN

OrgTechName: Internet Corporation for Assigned Names and Number

OrgTechPhone:

OrgTechEmail

OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN


OrgAbuseHandle: IANA-IP-ARIN

OrgAbuseName: Internet Corporation for Assigned Names and Number

OrgAbusePhone:

OrgAbuseEmail:

OrgAbuseRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN



#

# ARIN WHOIS data and services are subject to the Terms of Use

# available at: https://www.arin.net/whois_tou.html

#


<Personal Information Edited by Host>

MacBook Pro, OS X Mavericks (10.9), Early 2011

Posted on Nov 7, 2013 8:39 AM

Reply
2 replies

Nov 7, 2013 8:49 AM in response to fluxornyc12

haha, so now i'm thinking. I'm learning the terminal as fast as i can but there are several lines of codes and commands in there that throws up red flags to me that i don't fully understand. It just looks fishy too me. It would be highly appreciated if someone could just check this out just to tell me that i don't need to worry about it. Or point me in the right direction. I just feel un easy about this. ha.

Updated to Mavericks. Now theres tons of activity in my terminal and my activity monitor doesn't seem normal. I want to think someone's hacking me, but i need experienced help please!

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.