被駭了~~莫名出現新的使用者 - Linux

最近LINUX FC6的主機裡面莫名出現新的使用者

在HOME下面也出現了該帳號的資料夾

請問改ROOT密碼就OK了嗎

還是是從其他地方的漏洞進來的?!!?



********************
********************
Dec 27 00:32:47 www sshd[8390]:
Did not receive identification string from 60.49.12.1
好像有個不知名的IP在入侵我的主機

Dec 27 00:37:26 www sshd[8495]:
pam_unix(sshd:auth): authentication failure;
logname= uid=0 euid=0 tty=ssh ruser= rhost=60.49.12.1 user=root

Dec 27 00:37:28 www sshd[8495]:
Failed password for root from 60.49.12.1 port 44630 ssh2
這段是表示說它密碼猜測錯誤嗎?!

Dec 27 00:37:29 www sshd[8496]:
Received disconnect from 60.49.12.1: 11: Bye Bye

Dec 27 00:37:34 www sshd[8497]:
pam_unix(sshd:auth): authentication failure;
logname= uid=0 euid=0 tty=ssh ruser= rhost=60.49.12.1 user=root
這邊是不是表它它已經猜中密碼，取得ROOT的權限了?!

Dec 27 00:37:35 www sshd[8497]:
Failed password for root from 60.49.12.1 port 44995 ssh2


Dec 27 00:37:36 www sshd[8498]:
Received disconnect from 60.49.12.1: 11: Bye Bye

Dec 27 00:37:38 www sshd[8499]:
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh
ruser= rhost=60.49.12.1 user=root

Dec 27 00:37:40 www sshd[8499]:
Failed password for root from 60.49.12.1 port 45244 ssh2

Dec 27 00:37:44 www sshd[8501]:
Received disconnect from 60.49.12.1: 11: Bye Bye

Dec 27 00:37:54 www sshd[8503]: Connection closed by 60.49.12.1



--