6

When I turned my computer on this morning this is the message I received:

This computer's local hostname "----Macbook-pro.local" is already in
use on this network. The name has been changed to
"------Macbook-Pro-2.local" To change the local hostname, open system
preferences and click sharing, then click "edit" and type the name in
the local hostname field.

This is very concerning to me since I can't think of any reason this should happen. I do not understand any of the answers I have read while do a search. I have not done anything complicated nor do I have a WiFi along with an Ethernet connection - only a WiFi connection.

I only have one router as well and I always connect to same network. The things I have done differently are:

  • I have added a printer and have also downloaded Whatsapp but have not used it yet.
  • I opened Skype last night and have not done that in a while so maybe that could be the reason?

This is very concerning to me since I can't think of any reason this should happen unless it has something to do with what I said above. I am not comfortable changing settings that I really do not understand. I also felt as if I have been hacked or whatever it is called when someone takes over your computer. As I said, I am not an expert by any means and this is worrisome to me.

Can anyone please help and explain it in a way that I might understand what has happened. Thanks! Kind regards!!

  • Do you have access to your router and it's DHCP and/or DNS client page? Also, do you have it connected with both Ethernet and WiFi? – Allan Jul 17 '16 at 23:00
2

To analyze what might be this ghost network host, the command to use is a command line (which you have to run in Terminal or xterm):

dns-sd -G v4 ----Macbook-pro.local

If this name really exists within your accessible Wi-Fi network, then you will get its IP address within the last column of output of this command as in this example:

DATE: ---Sat 09 Dec 2017---
 0:42:42.548  ...STARTING...
Timestamp     A/R Flags if Hostname                               Address                                      TTL
 0:42:42.856  Add     2  6 ----Macbook-pro.local                  10.0.2.23                                    120

If you just get one IP address, then this error message was probably an internal bug within the MacOS way to manage its DNS cache.

If you get two different IP addresses, then you have an uninvited host within your network and behind your firewall (i.e. directly on the Wi-Fi part). This might be one of your neighbor. To continue on its correct identification, you will have to use methods which are considered as direct attacks on someone's computer.

For example, you might use iStumbler to physically locate it and then have a chance to interview the owner of this new visitor of your network.

  • Thank you for your answer. I got this same message and scared me.. I did follow what you say and it turns that there is only one IP address :) – Isa Jul 21 at 0:22
  • Why is probably an internal bug within the MacOS way to manage its DNS cache? – Isa Jul 21 at 0:26
0

You won't easily get hacked. Your router has a firewall which blocks all ports, unless you opened them and routing them to your internal IP address. You also have have to enable these features in your Sharing Preferences to work like File Sharing (port 21 for FTP), Remote Login (port 22 for SSH/SFTP) and a Web Server (port 80/443 for HTTP/HTTPS). These are all unticked by default.

What you can do to secure yourself

  1. Untick all the options in Sharing: enter image description here

  2. Make sure you have a difficult password on all your accounts.

  3. Enable your Firewall in System Preferences -> Security & Privacy -> Firewall

  4. Remove any Dynamic DNS services (like DynDNS) from your router (if you don't use it) that links your IP address to an actual address eg. myhouse.homelinux.com that would go to your IP address even if you get 100 new ones every day.

  5. If you removed the dynamic DNS service, restart your router to obtain a new IP address just to be sure that no one has your new IP.

  6. Check all the devices on your network, ban any unrecognized device's MAC address.

  7. Change your router password from admin/admin to something more difficult and your WiFi password. Combinations of numbers, upper & lowercase letters and special characters.

If you would like to know who this is, you can open the Terminal app, then type: ping ----Macbook-pro.local, here it will display the device's IP address and time in ms if the device responds.

  1. If it gives you an IP address, you can look up this IP address in your router at DHCP to block the device's MAC address.
  2. If you don't see an IP address, it is dead and you can change your hostname back to what it was.

Hope this helps, if anyone wants to add/change something, feel free. :)

  • The first sentence "You won't easily get hacked." is too much of an advertising. And in such a case, if a duplicate address is detected on the Wi-Fi side of the network, all this is happening inside of the perimeter protected by the firewall. The firewall can't protect in anyway two computers on the same side of the network (here the Wi-Fi side). – dan Dec 9 '17 at 0:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .