Author: matthew72
Date: 02-03-12 23:36
I think this is the datacenter console logged into my server. I'd like to kick them off but each time it says no matching process and who -u lists "old" as the process number.
Could this be some kind of hacker?
How can I log offer ttyv0? It's been logged in for 4-5 days.
======================================
# who
root ttyv0 Feb 28 03:05
root ttyp0 Mar 2 15:07 (my.ip.number.here)
# who -u
root ttyv0 Feb 28 03:05 old
root ttyp0 Mar 2 15:07 . (my.ip.number.here)
# ps x | grep ttyv0
52970 p0 R+ 0:00.00 grep ttyv0
# killall -9 52970
No matching processes were found
# ps x | grep ttyv0
52989 p0 R+ 0:00.00 grep ttyv0
# killall -9 52989
No matching processes were found
vit1# ps x | grep ttyv0
52993 p0 R+ 0:00.00 grep ttyv0
# killall -9 52993
No matching processes were found
|
|
