wurde ich gehackt ?? -- Log-Auszug

[dragon1979]

hir ein auszug

Jul 1 18:30:01 00 CRON[18031]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 18:30:01 00 CRON[18031]: (pam_unix) session closed for user www-data
Jul 1 18:39:01 00 CRON[18241]: (pam_unix) session opened for user root by (uid=0)
Jul 1 18:39:02 00 CRON[18241]: (pam_unix) session closed for user root
Jul 1 18:40:01 00 CRON[18262]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 18:40:01 00 CRON[18262]: (pam_unix) session closed for user www-data
Jul 1 18:41:01 00 CRON[18272]: (pam_unix) session opened for user root by (uid=0)
Jul 1 18:41:01 00 CRON[18272]: (pam_unix) session closed for user root
Jul 1 18:50:01 00 CRON[18453]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 18:50:01 00 CRON[18453]: (pam_unix) session closed for user www-data
Jul 1 18:56:01 00 CRON[18542]: (pam_unix) session opened for user root by (uid=0)
Jul 1 18:56:01 00 CRON[18542]: (pam_unix) session closed for user root
Jul 1 19:00:01 00 CRON[18561]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 19:00:01 00 CRON[18561]: (pam_unix) session closed for user www-data
Jul 1 19:09:01 00 CRON[18633]: (pam_unix) session opened for user root by (uid=0)
Jul 1 19:09:01 00 CRON[18633]: (pam_unix) session closed for user root
Jul 1 19:10:01 00 CRON[18658]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 19:10:01 00 CRON[18658]: (pam_unix) session closed for user www-data
Jul 1 19:11:01 00 CRON[18670]: (pam_unix) session opened for user root by (uid=0)
Jul 1 19:11:01 00 CRON[18670]: (pam_unix) session closed for user root
Jul 1 19:13:38 00 usermod[18695]: lock user `hgdfhuo7l' password
Jul 1 19:17:01 00 CRON[18761]: (pam_unix) session opened for user root by (uid=0)
Jul 1 19:17:01 00 CRON[18761]: (pam_unix) session closed for user root
Jul 1 19:20:01 00 CRON[18806]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 19:20:01 00 CRON[18806]: (pam_unix) session closed for user www-data
Jul 1 19:26:01 00 CRON[18821]: (pam_unix) session opened for user root by (uid=0)
Jul 1 19:26:01 00 CRON[18821]: (pam_unix) session closed for user root
Jul 1 19:30:01 00 CRON[18831]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 19:30:01 00 CRON[18831]: (pam_unix) session closed for user www-data
Jul 1 19:39:01 00 CRON[18963]: (pam_unix) session opened for user root by (uid=0)
Jul 1 19:39:01 00 CRON[18963]: (pam_unix) session closed for user root
Jul 1 19:40:01 00 CRON[19003]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 19:40:01 00 CRON[19003]: (pam_unix) session closed for user www-data
Jul 1 19:41:01 00 CRON[19041]: (pam_unix) session opened for user root by (uid=0)
Jul 1 19:41:01 00 CRON[19041]: (pam_unix) session closed for user root
Jul 1 19:50:01 00 CRON[19329]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 19:50:01 00 CRON[19329]: (pam_unix) session closed for user www-data
Jul 1 19:56:01 00 CRON[19508]: (pam_unix) session opened for user root by (uid=0)
Jul 1 19:56:01 00 CRON[19508]: (pam_unix) session closed for user root
Jul 1 19:58:01 00 CRON[19578]: (pam_unix) session opened for user drweb by (uid=0)
Jul 1 19:58:22 00 CRON[19578]: (pam_unix) session closed for user drweb
Jul 1 19:59:13 00 userdel[19687]: delete user `hgdfhuo7l'
Jul 1 20:00:01 00 CRON[19830]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 20:00:01 00 CRON[19830]: (pam_unix) session closed for user www-data
Jul 1 20:02:01 00 CRON[19904]: (pam_unix) session opened for user root by (uid=0)
Jul 1 20:02:02 00 CRON[19904]: (pam_unix) session closed for user root
Jul 1 18:09:01 00 CRON[17712]: (pam_unix) session opened for user root by (uid=0)
Jul 1 18:09:01 00 CRON[17712]: (pam_unix) session closed for user root
Jul 1 18:09:49 00 useradd[17737]: new user: name=hgdfhuo7l, UID=10004, GID=2524, home=/var/www/vhosts/home-of-speed2.webhop.net, shell=/bin/false
Jul 1 18:09:49 00 usermng: (pam_unix) password changed for hgdfhuo7l
Jul 1 18:09:49 00 usermng: (pam_unix) Password for hgdfhuo7l was changed
Jul 1 18:09:49 00 usermod[17738]: change user `hgdfhuo7l' Shell  from `/bin/false' to `/bin/false'
Jul 1 18:10:01 00 CRON[17777]: (pam_unix) session opened for user www-data by (uid=0)
Jul 1 18:10:01 00 CRON[17777]: (pam_unix) session closed for user www-data
Jul 1 18:11:01 00 CRON[17799]: (pam_unix) session opened for user root by (uid=0)
Jul 1 18:11:01 00 CRON[17799]: (pam_unix) session closed for user root
Jul 1 18:17:01 00 CRON[17838]: (pam_unix) session opened for user root by (



ich sag dazu mein ssh zugang is nur für meine ip ooffen