Has my SSH been compromised?
Posted by: Nuwanda
Posted on: 2008-03-31 20:10:00
Hi
I just created a Dreamhost account and gave my only user SSH access. I've logged in via Putty and after verifying that all was working I did a WHO command.
As well as myself I saw two other users listed. I logged off, and logged back on. I tried WHO again and saw three other users listed. One of the listed users is ROOT.
Since I haven't given any details to any other persons, can I assume something is seriously amiss?