Can't tell if I have been hacked :(

[Chasecreek Systemhouse]

On 3/20/06, Claude Jones <claude_jones at levitjames.com> wrote:
> Just to add something to this discussion. Today, I've just noticed that ssh
> has become disabled on two separate machines, one at home, and one at my
> (snip) ...

As root does the command `lastb` show that you've had tens of
thousands of attempted log ins?

The only recorded successful FC4 ssh break-in on a system I built
showed up as tens of thousands of random ssh log-in failures within an
hour.  When they hit 90,000 per hour the attacker got in.  They tried
to install a ebay spammer and some other code they had ftp'ed in from
S.America somewhere...

Of course, the system was reformatted that same day.
--
WC (Bill) Jones -- http://youve-reached-the.endoftheinternet.org/