[Gllug] Have I been compromised??

omphe omphe at keiko.demon.co.uk
Sun Sep 1 23:47:06 UTC 2002


Need some advice.  My apache logs show a few entries from outside
addresses, everything else coming from the localhost address.  All
outside requests have been responded to with 404's or 405's.
Chkrootkit detected nothing.  The history binary is in order.  ps seems
to be working fine.  Have I been compromised?

My inexperience tells me to reinstall, keeping only non-binaries in my
backups.  Need I clean off my windows partition as well?  Not sure if
I'm being paranoid or not.

Could use some guidance.

Thanks


Branden Faulls



-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list