am I hacked?
Martin Marques
martin at bugs.unl.edu.ar
Sat Apr 21 11:19:35 UTC 2007
peter kostov wrote:
> Hello,
>
> I was not reading my system logs regularly (that's bad!). Today I
> noticed the following:
Install logwatch.
[snip]
>
> In the logs I found exactly the same results since one month ago.
>
> Does that mean I have been hacked and all those binaries are replaced?
> The secure logs are full with unaccepted ssh connections. The only
> successful connections for this period are from a known IP, but
> unfortunately I have no older logs.
Doesn't look like that. Any way, I didn't read in all your mail witch
version of FC you were running, and if you have upgrades up2date.
I wouldn't worry so much. But get logwatch running right away.
--
21:50:04 up 2 days, 9:07, 0 users, load average: 0.92, 0.37, 0.18
---------------------------------------------------------
Lic. Martín Marqués | SELECT 'mmarques' ||
Centro de Telemática | '@' || 'unl.edu.ar';
Universidad Nacional | DBA, Programador,
del Litoral | Administrador
---------------------------------------------------------
More information about the users
mailing list