在linux主机的日志里发现如下内容,请高手朋友指点

xlghr

在linux主机的日志里发现如下内容,请高手朋友指点
May 12 15:18:05 rac02 sshd[17188]: Failed password for root from ::ffff:192.168.1.46 port 1148 ssh2
May 12 07:18:05 rac02 sshd[17189]: Failed password for root from ::ffff:192.168.1.46 port 1148 ssh2
May 12 15:18:08 rac02 sshd[17188]: Accepted password for root from ::ffff:192.168.1.46 port 1148 ssh2
May 12 07:18:08 rac02 sshd[17189]: Accepted password for root from ::ffff:192.168.1.46 port 1148 ssh2
May 12 07:26:10 rac02 sshd[29451]: Accepted password for root from ::ffff:192.168.1.46 port 1295 ssh2
May 12 15:26:10 rac02 sshd[29450]: Accepted password for root from ::ffff:192.168.1.46 port 1295 ssh2
May 12 15:27:15 rac02 userhelper[31093]: pam_timestamp: updated timestamp file `/var/run/sudo/oracle/unknown:root'
May 12 15:27:15 rac02 userhelper[31246]: running '/usr/share/system-logviewer/system-logviewer.py' with root privileges on behalf of 'oracle'
May 12 15:40:21 rac02 userhelper[18633]: pam_timestamp: timestamp file `/var/run/sudo/oracle/unknown:root' has unacceptable age (786 seconds), disallowing access to system-logviewer for user oracle
May 12 15:40:25 rac02 userhelper[18633]: pam_timestamp: updated timestamp file `/var/run/sudo/oracle/unknown:root'
May 12 15:40:25 rac02 userhelper[18712]: running '/usr/share/system-logviewer/system-logviewer.py' with root privileges on behalf of 'oracle'
May 12 15:44:16 rac02 sshd[6715]: Received signal 15; terminating.
May 12 15:47:51 rac02 sshd[6720]: Server listening on :: port 22.
May 12 15:47:51 rac02 sshd[6720]: error: Bind to port 22 on 0.0.0.0 failed: Address already in use.
May 12 16:11:53 rac02 userhelper[6877]: pam_timestamp: updated timestamp file `/var/run/sudo/root/unknown'
May 12 16:11:53 rac02 userhelper[6892]: running '/usr/share/system-logviewer/system-logviewer.py' with root privileges on behalf of 'root'
May 12 16:23:36 rac02 userhelper[24798]: pam_timestamp: updated timestamp file `/var/run/sudo/root/unknown'
May 12 16:23:36 rac02 userhelper[24799]: running '/usr/share/system-logviewer/system-logviewer.py' with root privileges on behalf of 'root'
May 12 16:28:15 rac02 userhelper[31917]: pam_timestamp: updated timestamp file `/var/run/sudo/root/unknown'
May 12 16:28:15 rac02 userhelper[31918]: running '/usr/share/system-logviewer/system-logviewer.py'

yuio654

192.168.1.46 ?内网？
嘛意思？

rucypli

内网其他人登录了啊，或者你的密码太简单，被别人很容易猜到，然后就该被别人按后门了