Given this evidence, should I be worried that I may have been hacked

2007-04-14 Thread Jim Stapleton
Once I opened up SSH to the outside world, my machine has been hammered once or twice a day most days, with username failures. None of the usernames would fit a username on my system (except root), and I have ssh set to deny root logins, and only use SSH2. Additionally, I have the following in

Re: Given this evidence, should I be worried that I may have been hacked

2007-04-14 Thread Gabor Kovesdan
Jim Stapleton schrieb: Once I opened up SSH to the outside world, my machine has been hammered once or twice a day most days, with username failures. None of the usernames would fit a username on my system (except root), and I have ssh set to deny root logins, and only use SSH2. Additionally, I

Re: Given this evidence, should I be worried that I may have been hacked

2007-04-14 Thread Jim Stapleton
I have DSA. I will change it to a nonstandard port, but I was wondering what your oppinion on a good way to check if this is the result of me being hacked, or just someone loosing interest. On 4/14/07, Gabor Kovesdan [EMAIL PROTECTED] wrote: Jim Stapleton schrieb: Once I opened up SSH to the

Re: Given this evidence, should I be worried that I may have been hacked

2007-04-14 Thread Bill Moran
In response to Jim Stapleton [EMAIL PROTECTED]: Once I opened up SSH to the outside world, my machine has been hammered once or twice a day most days, with username failures. None of the usernames would fit a username on my system (except root), and I have ssh set to deny root logins, and

Re: Given this evidence, should I be worried that I may have been hacked

2007-04-14 Thread Gabor Kovesdan
Jim Stapleton schrieb: I have DSA. I will change it to a nonstandard port, but I was wondering what your oppinion on a good way to check if this is the result of me being hacked, or just someone loosing interest. Well, I think the latter. If you have an up-to-date system with up-to-date

Re: Given this evidence, should I be worried that I may have been hacked

2007-04-14 Thread Martin Hudec
Jim Stapleton wrote: I have DSA. I will change it to a nonstandard port, but I was wondering what your oppinion on a good way to check if this is the result of me being hacked, or just someone loosing interest. If you are hacked, then something might or might not be going on your system

Re: Given this evidence, should I be worried that I may have been hacked

2007-04-14 Thread Paul Schmehl
--On April 14, 2007 7:25:46 AM -0400 Jim Stapleton [EMAIL PROTECTED] wrote: Once I opened up SSH to the outside world, my machine has been hammered once or twice a day most days, with username failures. None of the usernames would fit a username on my system (except root), and I have ssh set