Om du nu har blivit hackad så kan det varit via ssh, har du Fjärrinloggning på?
Skriv detta i en terminal så ser du alla loggarna när någon försöka logga in via ssh: more /var/log/system.log | grep sshd
Det kan stå tex
Jun 10 15:06:52 Power-Mac-G4 sshd[328]: error: PAM: Authentication failure for root from 192.168.0.1
Så här ser en vanlig timme ut på min linux router
Detta är ett axplock. Det är betydligt mer rader.
Jun 10 10:06:21 [sshd] Failed password for root from 84.25.17.220 port 55802 ssh2
Jun 10 10:06:26 [sshd] Failed password for root from 84.25.17.220 port 55890 ssh2
Jun 10 10:06:30 [sshd] Failed password for root from 84.25.17.220 port 55977 ssh2
Jun 10 10:06:34 [sshd] Illegal user carol from 84.25.17.220
Jun 10 10:06:34 [sshd] Failed password for illegal user carol from 84.25.17.220 port 56075 ssh2
Jun 10 10:06:39 [sshd] Illegal user cesar from 84.25.17.220
Jun 10 10:06:39 [sshd] Failed password for illegal user cesar from 84.25.17.220 port 56165 ssh2
Jun 10 10:06:43 [sshd] Illegal user clark from 84.25.17.220
Jun 10 10:06:43 [sshd] Failed password for illegal user clark from 84.25.17.220 port 56253 ssh2
Jun 10 10:06:48 [sshd] Illegal user clinton from 84.25.17.220
Jun 10 10:06:48 [sshd] Failed password for illegal user clinton from 84.25.17.220 port 56355 ssh2
Jun 10 10:06:52 [sshd] Illegal user kayla from 84.25.17.220
Jun 10 10:06:52 [sshd] Failed password for illegal user kayla from 84.25.17.220 port 56436 ssh2
Jun 10 10:06:57 [sshd] Illegal user russ from 84.25.17.220
Jun 10 10:06:57 [sshd] Failed password for illegal user russ from 84.25.17.220 port 56529 ssh2
Jun 10 10:07:01 [sshd] Illegal user white from 84.25.17.220
Jun 10 10:07:01 [sshd] Failed password for illegal user white from 84.25.17.220 port 56628 ssh2
Jun 10 10:07:05 [sshd] Illegal user danny from 84.25.17.220
Jun 10 10:07:06 [sshd] Failed password for illegal user danny from 84.25.17.220 port 56711 ssh2
Jun 10 10:07:10 [sshd] Illegal user filip from 84.25.17.220
Jun 10 10:07:10 [sshd] Failed password for illegal user filip from 84.25.17.220 port 56810 ssh2
Jun 10 10:07:14 [sshd] Illegal user stephanie from 84.25.17.220
Jun 10 10:07:14 [sshd] Failed password for illegal user stephanie from 84.25.17.220 port 56905 ssh2
Jun 10 10:07:19 [sshd] Failed password for root from 84.25.17.220 port 56997 ssh2
Jun 10 10:07:23 [sshd] Failed password for root from 84.25.17.220 port 57098 ssh2
Jun 10 10:07:28 [sshd] Failed password for root from 84.25.17.220 port 57188 ssh2
Jun 10 10:07:32 [sshd] Failed password for root from 84.25.17.220 port 57271 ssh2
Jun 10 10:07:36 [sshd] Failed password for root from 84.25.17.220 port 57368 ssh2
Jun 10 10:07:41 [sshd] Failed password for root from 84.25.17.220 port 57455 ssh2
Jun 10 10:07:45 [sshd] Failed password for root from 84.25.17.220 port 57542 ssh2
Jun 10 10:07:49 [sshd] Failed password for root from 84.25.17.220 port 57641 ssh2
Jun 10 10:07:54 [sshd] Failed password for root from 84.25.17.220 port 57723 ssh2
Jun 10 10:07:58 [sshd] Failed password for root from 84.25.17.220 port 57820 ssh2
Jun 10 10:08:03 [sshd] Failed password for root from 84.25.17.220 port 57924 ssh2
Jun 10 10:08:07 [sshd] Failed password for root from 84.25.17.220 port 58005 ssh2
Jun 10 10:08:12 [sshd] Failed password for root from 84.25.17.220 port 58098 ssh2
Jun 10 10:08:16 [sshd] Failed password for root from 84.25.17.220 port 58198 ssh2