peter kostov wrote:
Hello,
I was not reading my system logs regularly (that's bad!). Today I
noticed the following:
Install logwatch.
[snip]
In the logs I found exactly the same results since one month ago.
Does that mean I have been hacked and all those binaries are replaced?
The secure logs are full with unaccepted ssh connections. The only
successful connections for this period are from a known IP, but
unfortunately I have no older logs.
Doesn't look like that. Any way, I didn't read in all your mail witch
version of FC you were running, and if you have upgrades up2date.
I wouldn't worry so much. But get logwatch running right away.
--
21:50:04 up 2 days, 9:07, 0 users, load average: 0.92, 0.37, 0.18
---------------------------------------------------------
Lic. Martín Marqués | SELECT 'mmarques' ||
Centro de Telemática | '@' || 'unl.edu.ar';
Universidad Nacional | DBA, Programador,
del Litoral | Administrador
---------------------------------------------------------
