查看服务器是否被攻击:

/var/log/messages

/var/log/secure