[Gllug] Have I been compromised??

[Chris Bell]

On Mon 02 Sep, omphe wrote:
> 
> Need some advice.  My apache logs show a few entries from outside
> addresses, everything else coming from the localhost address.  All
> outside requests have been responded to with 404's or 405's.
> Chkrootkit detected nothing.  The history binary is in order.  ps seems
> to be working fine.  Have I been compromised?
> 
> My inexperience tells me to reinstall, keeping only non-binaries in my
> backups.  Need I clean off my windows partition as well?  Not sure if
> I'm being paranoid or not.
> 
> Could use some guidance.
> 
> Thanks
> 
> 
> Branden Faulls
> 

Would they be visits from well known search engines scanning for web sites?


-- 
Chris Bell


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug