Hello There,

My server is recieving ftp attacks and others in the last month, making me crazy. I´ve Blocked ftp for countries outside Brazil, but still strange things are happening.
Looking at the logfile, I´ve seen this.

su:
Sessions Opened:
faseq(uid=32003) -> root: 3 Time(s)
(uid=0) -> root: 2 Time(s)

sudo:
Unknown Entries:
authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=arasasasri00: 2 Time(s)

Its kind of blurry to me..
Does it mean that someone have erached root privileges??

Thank you all