我把日志贴上来大家帮忙看看
Feb 17 04:02:06 web1 logrotate: ALERT exited abnormally with [1]
Feb 18 04:02:07 web1 logrotate: ALERT exited abnormally with [1]
Feb 19 00:12:03 web1 sshd(pam_unix)[10386]: session opened for user root by root(uid=0)
Feb 19 04:02:06 web1 logrotate: ALERT exited abnormally with [1]
Feb 20 04:02:08 web1 logrotate: ALERT exited abnormally with [1]
Feb 21 04:02:07 web1 logrotate: ALERT exited abnormally with [1]
Feb 22 04:02:05 web1 logrotate: ALERT exited abnormally with [1]
Feb 22 08:29:01 web1 sshd(pam_unix)[18157]: session opened for user root by root(uid=0)
Feb 22 08:55:42 web1 sz[18390]: [root] jbossserver.txt/ZMODEM: 91313 Bytes, 37435 BPS
Feb 23 04:02:06 web1 logrotate: ALERT exited abnormally with [1]
Feb 24 04:02:07 web1 logrotate: ALERT exited abnormally with [1]
Feb 25 04:02:06 web1 logrotate: ALERT exited abnormally with [1]
Feb 26 04:02:06 web1 logrotate: ALERT exited abnormally with [1]
Feb 26 10:47:30 web1 sshd(pam_unix)[12927]: session opened for user root by root(uid=0)
Feb 27 04:02:07 web1 logrotate: ALERT exited abnormally with [1]
Feb 27 08:54:43 web1 sshd(pam_unix)[19360]: session opened for user root by root(uid=0)
Feb 27 08:55:00 web1 vsftpd: vsftpd vsftpd succeeded
Feb 27 08:55:26 web1 vsftpd(pam_unix)[19407]: check pass; user unknown
Feb 27 08:55:26 web1 vsftpd(pam_unix)[19407]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=222.90.193.104
Feb 27 08:55:38 web1 vsftpd(pam_unix)[19409]: check pass; user unknown
Feb 27 08:55:38 web1 vsftpd(pam_unix)[19409]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=222.90.193.104
Feb 27 08:55:56 web1 vsftpd(pam_unix)[19411]: check pass; user unknown
Feb 27 08:55:56 web1 vsftpd(pam_unix)[19411]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=222.90.193.104
Feb 27 08:56:15 web1 vsftpd(pam_unix)[19413]: check pass; user unknown
Feb 27 08:56:15 web1 vsftpd(pam_unix)[19413]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=222.90.193.104