I have a lamp server that beyond my initial setup on it, other than using it for lamp stuff I don't pay it much mind. Anyway, I decided to look at the auth.log and I'm baffled by what I saw. I'm not that savvy with the command line, marginally more-so with the gui. Is the information in the below image normal? or bad? automated process? or attacks? I know I didn't log in during that time frame.
Bookmarks