gravity.twi-31o2.org - What is this please?

[tp11235]

Hi,

As I searched around trying to fix an FTP problem I came across the following line in hosts.bck:

192.168.0.2 gravity.twi-31o2.org gravity

What is this for? I have no machine on the network with that ip. I have been fighting off hackers for a while so I was suspicious that this was some trojan. However, I cannot believe that the root account is compromised, my password is fully random.

My FTP problem was that I could not connect from a remote machine. I used to be able to but it stopped after some recent changes to PAM and ClamAV. I solved my problem with help from another forum member by discovering that in the pure-ftpd config file in /etc/conf.d if I changed the hostname for the actual ip address it worked.

Any advice on gravity gratefully received.

Tim.

[ebfe]

same here - on two independed boxes. deleted the entry in /etc/hosts

[Monkeh]

That's just an entry accidentally left in the stage file from building. You haven't been hacked, and it can be safely deleted