我只是检查我的契约服务器上的日志,我在auth.log中发现了一些奇怪的日志:
原文链接:https://www.f2er.com/ubuntu/348425.htmlJun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session opened for user user by (uid=0) Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session closed for user user Jun 17 22:28:01 mutualab CRON[16253]: pam_unix(cron:session): session opened for user user by (uid=0) Jun 17 22:28:01 mutualab CRON[16253]: pam_unix(cron:session): session closed for user alain Jun 17 22:29:01 mutualab CRON[16257]: pam_unix(cron:session): session opened for user user by (uid=0) Jun 17 22:29:01 mutualab CRON[16257]: pam_unix(cron:session): session closed for user user
看起来有人试图登录 – 并成功了? – 但立即消失?
我现在有几个小时的相同日志……
你知道会发生什么吗?