해킹 침입 기록

PID[7128]exe ->/bin/bash
PID[8661]exe ->/home/apache2/bin/httpd
PID[8664]exe ->/etc/udev/libudev-dev-2.0.so
PID[8665]exe ->/bin/bash
PID[8687]exe ->/usr/bin/ftp
PID[8688]exe ->/bin/bash
 
alhost logs]# cat access_log  | grep 218.38.19.83
218.38.19.83 - - [16/Dec/2011:23:35:24 +0900] "@jack!@#:218.38.19.83:23" 200 166249 "-" "-"
218.38.19.83 - - [16/Dec/2011:23:58:44 +0900] "@jack!@#:218.38.19.83:21" 200 - "-" "-"
218.38.19.83 - - [17/Dec/2011:00:00:06 +0900] "@jack!@#:218.38.19.83:22" 200 - "-" "-"
PID[1423]ls: /proc/1423: No such file or directory
PID[1424]exe ->/var/lib/nfs/statd/dm/libijs2.so