macchina compromessa?
Oggi nei log ho visto questo e non riesco a capire che cosa è successo
di preciso:
This email is sent by logcheck. If you wish to no-longer receive it,
you can either deinstall the logcheck package or modify its
configuration file (/etc/logcheck/logcheck.conf).
System Events
=-=-=-=-=-=-=
Aug 30 06:02:03 terra CRON[4979]: (pam_unix) session closed for user logcheck
Aug 30 06:09:01 terra CRON[5062]: (pam_unix) session opened for user root by (uid=0)
Aug 30 06:09:01 terra CRON[5062]: (pam_unix) session closed for user root
Aug 30 06:17:01 terra CRON[5070]: (pam_unix) session opened for user root by (uid=0)
Aug 30 06:17:01 terra CRON[5070]: (pam_unix) session closed for user root
Aug 30 06:25:01 terra CRON[5074]: (pam_unix) session opened for user root by (uid=0)
Aug 30 06:25:02 terra su[5103]: Successful su for nobody by root
Aug 30 06:25:02 terra su[5103]: + ??? root:nobody
Aug 30 06:25:02 terra su[5103]: (pam_unix) session opened for user nobody by (uid=0)
Aug 30 06:25:02 terra su[5103]: (pam_unix) session closed for user nobody
Aug 30 06:25:02 terra su[5107]: Successful su for nobody by root
Aug 30 06:25:02 terra su[5107]: + ??? root:nobody
Aug 30 06:25:02 terra su[5107]: (pam_unix) session opened for user nobody by (uid=0)
Aug 30 06:25:02 terra su[5107]: (pam_unix) session closed for user nobody
Aug 30 06:25:02 terra su[5109]: Successful su for nobody by root
Aug 30 06:25:02 terra su[5109]: + ??? root:nobody
Aug 30 06:25:02 terra su[5109]: (pam_unix) session opened for user nobody by (uid=0)
Aug 30 06:25:52 terra su[5109]: (pam_unix) session closed for user nobody
Aug 30 06:26:00 terra CRON[5074]: (pam_unix) session closed for user root
Aug 30 06:39:01 terra CRON[5220]: (pam_unix) session opened for user root by (uid=0)
Aug 30 06:39:01 terra CRON[5220]: (pam_unix) session closed for user root
Aug 30 07:02:01 terra CRON[5228]: (pam_unix) session opened for user logcheck by (uid=0)
ma l'utente nobody è riuscito a loggarsi?
--
Email.it, the professional e-mail, gratis per te: http://www.email.it/f
Sponsor:
In REGALO un GIOCO! Scegli GPBikes 3D,Bubble Boom, Rock City Empire
Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=6732&d=30-8
Reply to: