Hackers on the web
Andrei Smirnov <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.morlug |
|---|---|
| Message-ID | <[email protected]> |
I am running a RH7.2 server at home as a gateway to Adelphia's cable Internet. I recently checked the logs and found a huge number of root access attempts. I did not really see any suspicious things happening on that computer except once the external network card disconnected by itself (that is, somehow did 'ifdown eth1'), but I am not 100% sure if it wasn't something I accidentally triggered. My question is: is there a way to check if my system has been compromised? Should I reinstall/upgrade? -- --------------------------------------------- Dr. Andrei Smirnov, West Virginia University Dept. of Mechanical and Aerospace Engineering Morgantown WV, 26506-6106 Tel:+1(304)293 3111 x2345, fax:+1(304)2936689 Email: [email protected] http://smirnov.mae.wvu.edu 1024D/5CEDD3E2 ---------------------------------------------