am i being hacked?

issey · 06-08-2005, 04:14 AM

suddenly my internet connection was very slow...
and i did a <who> command to see if there was any ppl logged on to my machine... the result is shown below.

USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
root :0 - Wed 9am ? 0.00s 0.09s /bin/sh /usr/bi
root pts/1 - Wed 9am 5days 0.00s 0.21s kdeinit: kwrite
root pts/2 - Wed 9am 4days 0.07s 0.07s /bin/bash
root pts/3 192.168.1.66 8:13pm 0.00s 0.35s 0.01s w

is something wrong???? i know i am connected through 192.168.1.66 (lan)...
so wots the other connetions

thanks in advance

Crashed_Again · 06-08-2005, 06:05 AM

Are you logged in on other terminals? This is normal if you have a bunch of shells open.

issey · 06-08-2005, 06:24 AM

ahh... yeah i am logged in through putty and have quite a few terminals running on that machine....

thanks

trickykid · 06-08-2005, 08:47 AM

Quote:

Originally posted by issey
ahh... yeah i am logged in through putty and have quite a few terminals running on that machine....

thanks

Do the world a favor and don't login as root either.. setup sudo or use su when needed.. but logging in as root remotely is a bad idea.. I don't care if your using ssh or not, bad idea.. very bad.. bad habit and bad for security on your machine!