am I hacked?

[Martin Marques]

peter kostov wrote:
> Hello,
> 
> I was not reading my system logs regularly (that's bad!).  Today I 
> noticed the following:

Install logwatch.

[snip]
> 
> In the logs I found exactly the same results since one month ago.
> 
> Does that mean I have been hacked and all those binaries are replaced?
> The secure logs are full with unaccepted ssh connections. The only 
> successful connections for this period are from a known IP, but 
> unfortunately  I have no older logs.

Doesn't look like that. Any way, I didn't read in all your mail witch 
version of FC you were running, and if you have upgrades up2date.

I wouldn't worry so much. But get logwatch running right away.

-- 
  21:50:04 up 2 days,  9:07,  0 users,  load average: 0.92, 0.37, 0.18
---------------------------------------------------------
Lic. Martín Marqués         |   SELECT 'mmarques' ||
Centro de Telemática        |       '@' || 'unl.edu.ar';
Universidad Nacional        |   DBA, Programador,
     del Litoral             |   Administrador
---------------------------------------------------------