Re: how to detect hack attempts.

[George N. White III]

On Thu, 20 Feb 2020 at 18:50, home user  wrote:
> (on 02/20/2020 at 2:10pm mountain time, Ed said)
> > Do you have a fixed IP or dynamic IP?
>
> I believe it's fixed, provided by the ISP (comcast).
> > What services do you run on your system?  It helps to know what area
>
> you're concerned with.
> Firefox, Thunderbird, Tor (rarely), dnf, zoom (for meetings). (What
>
> counts as "services" here?)
> Other uses of internet are "under the hood" and mostly
>
> unknown/invisible to me.
> Oddball: when logged in as root, and I launch a terminal, several
>
> seconds later, I see a short wave of internet activity; this is very
> consistent.  What's going on there?
> No one is authorized to connect in from outside; I myself do not try
>
> to do so.
>
> This morning, I got 2 messages from the bank saying 2 attempts to make
> purchases via paypal were rejected because the card had not yet been
> activated.

"Not yet been activated" sounds like someone stole the mail and tried to
use
your new card (new 3-digit code and new expiry date).
> [...]