February 20th 2026 05:17:09 PM

Agentes linea:                  


+ossec-server (127.0.0.1)
+Victor (192.168.18.8) - Inactive

Ultimos archivos modificados:


+/boot/grub/grub.cfg


Ultimos eventos


2026 Feb 20 15:04:36 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 15:04:34 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 15:04:34 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 15:04:34 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T15:04:33.639469-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/bin/systemctl restart apache2

2026 Feb 20 15:04:24 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 15:04:24 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 15:04:24 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T15:04:24.751298-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2ensite seolytics.conf

2026 Feb 20 15:04:16 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 15:04:16 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 15:04:16 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T15:04:16.039454-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2ensite machag.conf

2026 Feb 20 15:04:08 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 15:04:06 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 15:04:06 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T15:04:06.903443-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2ensite gerardo.conf

2026 Feb 20 15:04:00 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 15:04:00 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 15:04:00 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T15:04:00.399433-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2ensite spectrvm.conf

2026 Feb 20 15:03:34 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:57:14 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:57:14 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:57:13.512381-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/bin/certbot certonly --manual --preferred-challenges dns -d casadevargas.nom.pe -d *.casadevargas.nom.pe

2026 Feb 20 14:56:18 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:56:18 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:56:18 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:56:16.728160-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/bin/systemctl restart apache2

2026 Feb 20 14:56:14 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:56:14 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:56:14 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:56:12.843045-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2ensite vargas.conf

2026 Feb 20 14:55:58 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:55:58 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:55:58 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:55:56.936290-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2dissite seolytics.conf

2026 Feb 20 14:55:26 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:47:08 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:47:08 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:47:06.513535-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/bin/certbot certonly --manual --preferred-challenges dns -d seolytics.net.pe -d *.seolytics.net.pe

2026 Feb 20 14:45:56 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:45:56 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:45:56 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:45:55.608610-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/bin/systemctl restart apache2

2026 Feb 20 14:45:52 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:45:52 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:45:52 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:45:51.825233-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2ensite seolytics.conf

2026 Feb 20 14:45:30 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:45:30 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:45:30 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:45:29.240994-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2dissite machag.conf

2026 Feb 20 14:44:41 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:31:07 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:31:07 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:31:06.370443-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/bin/certbot certonly --manual --preferred-challenges dns -d machag.pe -d *.machag.pe

2026 Feb 20 14:30:37 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:30:37 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:30:37 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:30:35.834092-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/bin/systemctl restart apache2

2026 Feb 20 14:30:23 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:30:23 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:30:23 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:30:21.977864-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2dissite gerardo.conf

2026 Feb 20 14:30:13 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:30:13 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:30:13 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:30:12.442147-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2dissite seolytics.conf

2026 Feb 20 14:29:49 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:29:49 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:29:49 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:29:48.585880-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2dissite vargas.conf

2026 Feb 20 14:29:45 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:29:45 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:29:45 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:29:43.841924-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2dissite vargasf.conf

2026 Feb 20 14:29:31 Rule Id: 5502 level: 3
Location:
Src IP:
Login session closed.

2026 Feb 20 14:29:29 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:29:29 Rule Id: 5402 level: 3
Location:
Src IP:
Successful sudo to ROOT executed
2026-02-20T14:29:29.154797-05:00 chuspi sudo: espectro : TTY=pts/0 ; PWD=/etc/apache2/sites-available ; USER=root ; COMMAND=/usr/sbin/a2dissite spectrvm.conf

2026 Feb 20 14:29:17 Rule Id: 5503 level: 5
Location:
Src IP:
User login failed.
2026-02-20T14:29:16.603895-05:00 chuspi sudo: pam_unix(sudo:auth): authentication failure; logname=espectro uid=1000 euid=0 tty=/dev/pts/0 ruser=espectro rhost= user=espectro

2026 Feb 20 14:28:33 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 14:28:33 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 14:28:33 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 14:28:29 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:28:29 Rule Id: 5501 level: 3
Location:
Src IP:
Login session opened.

2026 Feb 20 14:28:29 Rule Id: 5715 level: 3
Location:
Src IP:
SSHD authentication success.
User: espectro
2026-02-20T14:28:28.198249-05:00 chuspi sshd[2003148]: Accepted password for espectro from 192.168.18.8 port 50643 ssh2

2026 Feb 20 13:21:50 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 07:15:20 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 06:19:33 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 00:00:14 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 00:00:14 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.

2026 Feb 20 00:00:14 Rule Id: 1002 level: 2
Location:
Src IP:
Unknown problem somewhere in the system.