troubleshooting Question

Has my ubuntu computer been hacked and if so, what should I do?

Avatar of lhcsd
lhcsdFlag for United States of America asked on
Linux
11 Comments1 Solution868 ViewsLast Modified:
I recently setup openssh on an Ubuntu machine. The only type of authentication was using strong passwords (no public key authentication). Now by the looks of my auth files in the /var/log directory, my ssh server has been accessed repeatedly. I have no idea how to find out what was done during these sessions. My first thought was to reformat the drive but I have a lot of time into setting up my current dual-boot setup.

I need from some linux ninjas advice on the best course of action.
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 11 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 11 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros