나는 보안인이다

📜 Syslog 로그 목록

총 로그 수: 1710302 건

번호	발생 시각 (ReceivedAt)	출발지 호스트 (FromHost)	로그 메시지 (Message)
1755658	2026-08-25 15:53:12	IP174	pam_unix(sudo:session): session closed for user root
1755654	2026-08-25 15:52:52	IP174	pam_unix(sudo:session): session closed for user root
1755649	2026-08-25 15:52:51	IP174	master : TTY=pts/3 ; PWD=/home/master ; USER=root ; COMMAND=/usr/bin/bash -lc 'set -e; if id lucid-guard >/dev/null 2>&1; then pkill -TERM -u lucid-guard 2>/dev/null \|\| true; loginctl terminate-user lucid-guard 2>/dev/null \|\| true; crontab -r -u lucid-guard 2>/dev/null \|\| true; userdel -r lucid-guard; fi; rm -f /usr/local/sbin/lucid-scepter /usr/local/sbin/lucid-guard-helper.sh /etc/sudoers.d/lucid-guard /tmp/lucid-helper.sh /run/lucid-full-isolation.sh /var/log/lucid-full-isolation.log; if test -d /var/lib/lucid-quarantine; then rm -rf --one-file-system /var/lib/lucid-quarantine; fi; nft delete table inet lucid_isolation 2>/dev/null \|\| true; nft delete table inet lucid_full_isolation 2>/dev/null \|\| true; nft delete table inet lucid_ddos 2>/dev/null \|\| true; systemctl daemon-reload; echo LUCID_REMOTE_REVOKE_DONE'
1755650	2026-08-25 15:52:51	IP174	pam_unix(sudo:session): session opened for user root(uid=0) by master(uid=1000)
1755651	2026-08-25 15:52:51	IP174	delete user 'lucid-guard'
1755652	2026-08-25 15:52:51	IP174	removed group 'lucid-guard' owned by 'lucid-guard'
1755653	2026-08-25 15:52:51	IP174	removed shadow group 'lucid-guard' owned by 'lucid-guard'
1755648	2026-08-25 15:52:24	IP174	pam_unix(sudo:session): session closed for user root
1755646	2026-08-25 15:52:24	IP174	master : TTY=pts/3 ; PWD=/home/master ; USER=root ; COMMAND=/usr/bin/bash -lc 'echo "=== HOME SUMMARY ==="; du -sh /home/lucid-guard; stat -c "%U:%G %a %y %n" /home/lucid-guard /home/lucid-guard/public_html /home/lucid-guard/backup.sh /home/lucid-guard/auto_restore.sh; echo "=== WEB REFERENCES ==="; grep -RniE "/home/lucid-guard\|lucid-guard" /etc/apache2 /etc/nginx 2>/dev/null \|\| true; echo "=== APACHE VHOSTS ==="; apache2ctl -S 2>&1 \| grep -iE "lucid\|174\|namevhost\|port 80\|port 443" \|\| true; echo "=== ACTIVE FILES ==="; command -v lsof >/dev/null && lsof +D /home/lucid-guard 2>/dev/null \| head -n 50 \|\| true; echo "=== TIMERS CRON REFERENCES ==="; grep -RniE "/home/lucid-guard\|lucid-guard" /etc/cron* /var/spool/cron /etc/systemd/system 2>/dev/null \|\| true'
1755647	2026-08-25 15:52:24	IP174	pam_unix(sudo:session): session opened for user root(uid=0) by master(uid=1000)