root ghosts?
# uptime
21:58:10 up 60 days, 7:04, 52 users, load average: 0.11, 0.16, 0.09
21:58:10 up 60 days, 7:04, 52 users, load average: 0.11, 0.16, 0.09
# who -a
Jan 16 14:53 206 id=si term=0 exit=0
system boot Jan 16 14:53
run-level 5 Jan 16 14:53 last=S
Jan 16 14:55 2012 id=l5 term=0 exit=0
Jan 16 14:55 2743 id=1
Jan 16 14:55 2751 id=2
Jan 16 14:55 2759 id=3
Jan 16 14:55 2767 id=4
Jan 16 14:55 2775 id=5
Jan 16 14:55 2780 id=6
Jan 16 14:55 2784 id=x
root ? :0 Feb 13 15:57 ? 2081
pts/1 Feb 7 22:58 0 id=/1 term=0 exit=0
pts/2 Jan 16 15:36 3379 id=ts/2 term=0 exit=0
pts/11 Jan 16 15:13 3887 id=/11 term=0 exit=0
pts/22 Jan 16 15:36 4403 id=s/22 term=0 exit=0
pts/24 Jan 17 00:02 4494 id=s/24 term=0 exit=0
pts/33 Jan 16 15:46 4906 id=/33 term=0 exit=0
pts/34 Jan 16 15:47 4935 id=/34 term=0 exit=0
pts/72 Jan 18 20:46 27678 id=s/72 term=0 exit=0
pts/79 Jan 17 16:12 0 id=/79 term=0 exit=0
pts/80 Jan 17 16:45 0 id=/80 term=0 exit=0
pts/151 Jan 19 01:12 18224 id=/151 term=0 exit=0
pts/160 Jan 19 02:09 15456 id=/160 term=0 exit=0
pts/165 Jan 19 17:27 15956 id=/165 term=0 exit=0
pts/170 Jan 20 16:06 12444 id=/170 term=0 exit=0
pts/203 Jan 20 22:05 17891 id=/203 term=0 exit=0
pts/252 Jan 20 21:48 6477 id=/252 term=0 exit=0
pts/257 Jan 20 22:05 6765 id=/257 term=0 exit=0
pts/261 Jan 21 15:01 7751 id=/261 term=0 exit=0
pts/262 Jan 21 18:10 10534 id=/262 term=0 exit=0
pts/264 Jan 22 00:47 10478 id=/264 term=0 exit=0
pts/266 Jan 24 02:08 1696 id=/266 term=0 exit=0
pts/275 Jan 23 00:50 10558 id=/275 term=0 exit=0
pts/298 Jan 24 00:23 0 id=/298 term=0 exit=0
pts/303 Jan 24 23:32 25465 id=/303 term=0 exit=0
pts/311 Jan 26 14:32 13015 id=/311 term=0 exit=0
pts/349 Jan 26 14:25 16644 id=/349 term=0 exit=0
pts/352 Jan 26 22:54 16872 id=/352 term=0 exit=0
pts/355 Jan 26 19:18 5030 id=/355 term=0 exit=0
pts/380 Jan 27 18:22 10760 id=/380 term=0 exit=0
pts/390 Jan 26 22:53 14159 id=/390 term=0 exit=0
pts/393 Jan 26 23:14 14623 id=/393 term=0 exit=0
pts/408 Jan 27 02:02 20016 id=/408 term=0 exit=0
pts/430 Jan 28 15:47 9906 id=/430 term=0 exit=0
pts/433 Jan 27 23:45 5913 id=/433 term=0 exit=0
pts/438 Jan 28 01:34 14804 id=/438 term=0 exit=0
pts/439 Jan 28 15:47 14849 id=/439 term=0 exit=0
pts/452 Jan 28 21:42 18896 id=/452 term=0 exit=0
pts/454 Jan 29 00:02 21646 id=/454 term=0 exit=0
pts/455 Jan 29 13:13 22398 id=/455 term=0 exit=0
pts/457 Jan 30 14:53 10032 id=/457 term=0 exit=0
pts/461 Jan 31 13:55 12753 id=/461 term=0 exit=0
pts/475 Jan 31 15:47 4339 id=/475 term=0 exit=0
pts/479 Jan 31 18:17 4573 id=/479 term=0 exit=0
pts/484 Jan 31 20:06 6493 id=/484 term=0 exit=0
pts/485 Feb 1 09:39 6558 id=/485 term=0 exit=0
pts/503 Feb 2 18:44 32159 id=/503 term=0 exit=0
pts/505 Feb 1 18:56 4544 id=/505 term=0 exit=0
pts/511 Feb 2 17:33 11988 id=/511 term=0 exit=0
pts/513 Feb 3 23:04 27548 id=/513 term=0 exit=0
pts/519 Feb 3 15:46 3133 id=/519 term=0 exit=0
pts/521 Feb 3 16:20 17533 id=/521 term=0 exit=0
pts/523 Feb 3 16:43 22362 id=/523 term=0 exit=0
pts/533 Feb 5 01:59 19432 id=/533 term=0 exit=0
pts/552 Feb 5 14:59 3719 id=/552 term=0 exit=0
pts/557 Feb 5 19:10 13128 id=/557 term=0 exit=0
pts/563 Feb 5 21:20 14596 id=/563 term=0 exit=0
pts/565 Feb 6 23:37 14795 id=/565 term=0 exit=0
pts/593 Feb 8 14:40 22384 id=/593 term=0 exit=0
pts/596 Feb 7 00:03 23797 id=/596 term=0 exit=0
pts/597 Feb 7 20:56 23896 id=/597 term=0 exit=0
pts/601 Feb 7 20:09 25032 id=/601 term=0 exit=0
pts/603 Feb 7 20:12 25130 id=/603 term=0 exit=0
pts/607 Feb 7 23:09 25571 id=/607 term=0 exit=0
pts/610 Feb 7 22:50 25760 id=/610 term=0 exit=0
pts/622 Feb 8 15:51 1938 id=/622 term=0 exit=0
pts/628 Feb 8 16:30 2397 id=/628 term=0 exit=0
pts/632 Feb 8 22:36 5509 id=/632 term=0 exit=0
pts/634 Feb 8 23:33 5871 id=/634 term=0 exit=0
pts/637 Feb 9 11:14 18247 id=/637 term=0 exit=0
pts/639 Feb 9 11:15 18476 id=/639 term=0 exit=0
pts/642 Feb 9 11:53 18717 id=/642 term=0 exit=0
pts/644 Feb 9 19:20 20330 id=/644 term=0 exit=0
pts/646 Feb 12 11:59 20402 id=/646 term=0 exit=0
pts/650 Feb 10 15:54 26138 id=/650 term=0 exit=0
pts/663 Feb 11 14:54 14017 id=/663 term=0 exit=0
pts/665 Feb 11 14:54 14172 id=/665 term=0 exit=0
pts/668 Feb 11 15:53 21842 id=/668 term=0 exit=0
pts/673 Feb 12 21:43 0 id=/673 term=0 exit=0
pts/677 Feb 13 20:50 20958 id=/677 term=0 exit=0
pts/679 Feb 12 21:46 0 id=/679 term=0 exit=0
root ? pts/688 Feb 13 15:53 ? 1886 (:0.0)
pts/689 Feb 26 16:55 0 id=/689 term=0 exit=0
pts/697 Feb 14 00:03 9656 id=/697 term=0 exit=0
pts/699 Feb 14 00:16 9902 id=/699 term=0 exit=0
pts/701 Feb 15 16:51 10058 id=/701 term=0 exit=0
pts/716 Feb 15 08:44 1159 id=/716 term=0 exit=0
pts/722 Feb 15 19:51 22641 id=/722 term=0 exit=0
pts/732 Feb 15 19:45 29328 id=/732 term=0 exit=0
pts/734 Feb 17 22:17 30394 id=/734 term=0 exit=0
pts/760 Feb 16 21:33 8466 id=/760 term=0 exit=0
pts/762 Feb 16 19:45 16020 id=/762 term=0 exit=0
pts/763 Feb 16 19:55 22522 id=/763 term=0 exit=0
pts/765 Feb 16 20:24 28372 id=/765 term=0 exit=0
pts/775 Feb 17 15:59 10562 id=/775 term=0 exit=0
pts/780 Feb 17 23:40 21000 id=/780 term=0 exit=0
pts/783 Feb 17 23:44 21300 id=/783 term=0 exit=0
pts/784 Feb 17 23:48 21361 id=/784 term=0 exit=0
pts/785 Feb 18 14:25 22364 id=/785 term=0 exit=0
pts/787 Feb 18 15:22 24049 id=/787 term=0 exit=0
pts/789 Feb 18 17:42 24706 id=/789 term=0 exit=0
pts/791 Feb 20 12:57 26191 id=/791 term=0 exit=0
pts/804 Feb 20 23:29 21109 id=/804 term=0 exit=0
pts/820 Feb 21 15:32 7106 id=/820 term=0 exit=0
pts/836 Feb 21 15:32 8204 id=/836 term=0 exit=0
pts/846 Feb 21 16:13 12509 id=/846 term=0 exit=0
pts/847 Feb 21 17:29 18234 id=/847 term=0 exit=0
pts/848 Feb 21 16:36 18300 id=/848 term=0 exit=0
pts/856 Feb 21 21:19 22064 id=/856 term=0 exit=0
pts/857 Feb 23 20:14 26481 id=/857 term=0 exit=0
pts/870 Feb 23 02:02 26584 id=/870 term=0 exit=0
pts/872 Feb 23 22:09 17931 id=/872 term=0 exit=0
pts/874 Feb 23 23:15 18585 id=/874 term=0 exit=0
pts/875 Feb 24 14:49 22564 id=/875 term=0 exit=0
pts/879 Feb 25 14:30 30864 id=/879 term=0 exit=0
pts/881 Feb 24 20:03 31058 id=/881 term=0 exit=0
pts/884 Feb 25 14:30 32230 id=/884 term=0 exit=0
pts/888 Feb 25 10:43 9761 id=/888 term=0 exit=0
pts/890 Feb 26 00:58 1657 id=/890 term=0 exit=0
pts/892 Feb 26 12:33 7137 id=/892 term=0 exit=0
pts/894 Feb 26 15:42 9359 id=/894 term=0 exit=0
pts/896 Feb 26 23:52 10279 id=/896 term=0 exit=0
pts/899 Feb 28 01:28 13968 id=/899 term=0 exit=0
pts/901 Feb 27 18:18 14201 id=/901 term=0 exit=0
pts/902 Feb 27 20:10 14261 id=/902 term=0 exit=0
pts/904 Feb 28 17:19 15537 id=/904 term=0 exit=0
pts/906 Feb 28 17:24 15634 id=/906 term=0 exit=0
pts/908 Feb 28 21:22 15768 id=/908 term=0 exit=0
pts/910 Mar 1 08:30 19610 id=/910 term=0 exit=0
pts/911 Mar 1 14:51 20410 id=/911 term=0 exit=0
pts/914 Mar 1 20:45 20555 id=/914 term=0 exit=0
pts/915 Mar 2 01:16 20782 id=/915 term=0 exit=0
pts/918 Mar 2 10:52 22549 id=/918 term=0 exit=0
pts/920 Mar 2 18:44 22643 id=/920 term=0 exit=0
pts/922 Mar 3 17:03 24053 id=/922 term=0 exit=0
pts/924 Mar 2 22:46 24131 id=/924 term=0 exit=0
pts/925 Mar 2 23:01 24196 id=/925 term=0 exit=0
pts/926 Mar 2 22:55 24240 id=/926 term=0 exit=0
pts/929 Mar 4 21:09 24583 id=/929 term=0 exit=0
pts/931 Mar 3 15:35 25313 id=/931 term=0 exit=0
pts/934 Mar 3 16:27 25440 id=/934 term=0 exit=0
pts/936 Mar 5 14:41 19833 id=/936 term=0 exit=0
pts/937 Mar 5 15:11 21518 id=/937 term=0 exit=0
pts/939 Mar 7 01:08 21628 id=/939 term=0 exit=0
pts/953 Mar 6 21:59 30731 id=/953 term=0 exit=0
pts/972 Mar 7 10:18 439 id=/972 term=0 exit=0
pts/1009 Mar 7 00:34 8499 id=/100 term=0 exit=0
pts/1018 Mar 7 00:51 8893 id=/101 term=0 exit=0
pts/1023 Mar 7 01:02 9331 id=/102 term=0 exit=0
root ? pts/1032 Mar 7 01:55 ? 10459 (192.168.1.2)
root ? pts/1034 Mar 7 01:59 ? 10626 (192.168.1.2)
pts/1037 Mar 7 10:14 11927 id=/103 term=0 exit=0
pts/1048 Mar 7 10:24 12729 id=/104 term=0 exit=0
pts/1054 Mar 7 11:16 13545 id=/105 term=0 exit=0
root ? pts/1059 Mar 7 15:44 ? 14936 (192.168.1.2)
root ? pts/1060 Mar 7 17:22 ? 15115 (192.168.1.2)
root ? pts/1065 Mar 8 20:18 ? 4570 (192.168.1.2)
root ? pts/1066 Mar 9 12:23 ? 7920 (192.168.1.2)
root ? pts/1069 Mar 9 12:40 ? 8032 (192.168.1.2)
root ? pts/1071 Mar 9 21:18 ? 8149 (192.168.1.2)
root ? pts/1072 Mar 9 22:47 ? 8203 (192.168.1.2)
root ? pts/1074 Mar 10 00:03 ? 11198 (192.168.1.2)
root ? pts/1075 Mar 10 00:24 ? 11253 (192.168.1.2)
root ? pts/1078 Mar 10 15:07 ? 12047 (192.168.1.2)
root ? pts/1079 Mar 11 15:48 ? 17048 (192.168.1.2)
root ? pts/1080 Mar 11 19:07 ? 17207 (192.168.1.2)
root ? pts/1081 Mar 11 20:11 ? 17255 (192.168.1.2)
root ? pts/1083 Mar 11 22:16 ? 17342 (192.168.1.2)
root ? pts/1085 Mar 12 00:16 ? 21532 (192.168.1.2)
root ? pts/1087 Mar 12 00:28 ? 21697 (192.168.1.2)
root ? pts/1094 Mar 12 14:10 ? 29945 (192.168.1.2)
root ? pts/1095 Mar 12 23:44 ? 30052 (192.168.1.2)
root ? pts/1097 Mar 13 18:49 ? 8268 (192.168.1.2)
root ? pts/1100 Mar 13 20:31 ? 8487 (192.168.1.2)
root ? pts/1101 Mar 13 21:11 ? 8547 (192.168.1.2)
root ? pts/1103 Mar 13 21:46 ? 8871 (192.168.1.2)
root ? pts/1105 Mar 13 21:48 ? 8948 (192.168.1.2)
root ? pts/1106 Mar 13 23:28 ? 9022 (192.168.1.2)
root ? pts/1109 Mar 14 00:45 ? 15072 (192.168.1.2)
root ? pts/1111 Mar 14 02:32 ? 15163 (192.168.1.2)
root ? pts/1117 Mar 14 02:54 ? 15696 (192.168.1.2)
root ? pts/1125 Mar 14 12:39 ? 20993 (192.168.1.2)
root ? pts/1128 Mar 14 13:00 ? 23034 (192.168.1.2)
pts/1138 Mar 14 13:20 23589 id=/113 term=0 exit=0
root ? pts/1132 Mar 14 13:15 ? 23360 (192.168.1.2)
pts/1144 Mar 14 15:20 24806 id=/114 term=0 exit=0
root ? pts/1143 Mar 14 15:15 ? 24669 (192.168.1.2)
root ? pts/1145 Mar 14 17:32 ? 25981 (192.168.1.2)
root ? pts/1147 Mar 14 19:16 ? 26742 (192.168.1.2)
pts/1150 Mar 14 19:41 27076 id=/115 term=0 exit=0
root ? pts/1154 Mar 14 20:05 ? 27298 (192.168.1.2)
root ? pts/1157 Mar 15 13:01 ? 9610 (192.168.1.2)
root ? pts/1158 Mar 15 16:50 ? 10640 (192.168.1.2)
root ? pts/1161 Mar 15 20:45 ? 11718 (192.168.1.2)
root ? pts/1180 Mar 15 21:53 ? 13435 (192.168.1.2)
root ? pts/1182 Mar 15 21:53 ? 13506 (192.168.1.2)
root ? pts/1185 Mar 15 21:56 ? 13636 (192.168.1.2)
root ? pts/1187 Mar 15 21:59 ? 13731 (192.168.1.2)
root ? pts/1190 Mar 15 22:35 ? 14039 (192.168.1.2)
root ? pts/1225 Mar 17 13:03 ? 11730 (192.168.1.2)
root ? pts/1226 Mar 17 16:26 ? 12836 (192.168.1.2)
root ? pts/1227 Mar 17 17:38 ? 13172 (192.168.1.2)
root ? pts/1228 Mar 17 19:22 ? 13673 (192.168.1.2)
root ? pts/1229 Mar 17 19:34 ? 13776 (192.168.1.2)
root + pts/1230 Mar 17 21:52 . 14400 (192.168.1.2)
Jan 16 14:53 206 id=si term=0 exit=0
system boot Jan 16 14:53
run-level 5 Jan 16 14:53 last=S
Jan 16 14:55 2012 id=l5 term=0 exit=0
Jan 16 14:55 2743 id=1
Jan 16 14:55 2751 id=2
Jan 16 14:55 2759 id=3
Jan 16 14:55 2767 id=4
Jan 16 14:55 2775 id=5
Jan 16 14:55 2780 id=6
Jan 16 14:55 2784 id=x
root ? :0 Feb 13 15:57 ? 2081
pts/1 Feb 7 22:58 0 id=/1 term=0 exit=0
pts/2 Jan 16 15:36 3379 id=ts/2 term=0 exit=0
pts/11 Jan 16 15:13 3887 id=/11 term=0 exit=0
pts/22 Jan 16 15:36 4403 id=s/22 term=0 exit=0
pts/24 Jan 17 00:02 4494 id=s/24 term=0 exit=0
pts/33 Jan 16 15:46 4906 id=/33 term=0 exit=0
pts/34 Jan 16 15:47 4935 id=/34 term=0 exit=0
pts/72 Jan 18 20:46 27678 id=s/72 term=0 exit=0
pts/79 Jan 17 16:12 0 id=/79 term=0 exit=0
pts/80 Jan 17 16:45 0 id=/80 term=0 exit=0
pts/151 Jan 19 01:12 18224 id=/151 term=0 exit=0
pts/160 Jan 19 02:09 15456 id=/160 term=0 exit=0
pts/165 Jan 19 17:27 15956 id=/165 term=0 exit=0
pts/170 Jan 20 16:06 12444 id=/170 term=0 exit=0
pts/203 Jan 20 22:05 17891 id=/203 term=0 exit=0
pts/252 Jan 20 21:48 6477 id=/252 term=0 exit=0
pts/257 Jan 20 22:05 6765 id=/257 term=0 exit=0
pts/261 Jan 21 15:01 7751 id=/261 term=0 exit=0
pts/262 Jan 21 18:10 10534 id=/262 term=0 exit=0
pts/264 Jan 22 00:47 10478 id=/264 term=0 exit=0
pts/266 Jan 24 02:08 1696 id=/266 term=0 exit=0
pts/275 Jan 23 00:50 10558 id=/275 term=0 exit=0
pts/298 Jan 24 00:23 0 id=/298 term=0 exit=0
pts/303 Jan 24 23:32 25465 id=/303 term=0 exit=0
pts/311 Jan 26 14:32 13015 id=/311 term=0 exit=0
pts/349 Jan 26 14:25 16644 id=/349 term=0 exit=0
pts/352 Jan 26 22:54 16872 id=/352 term=0 exit=0
pts/355 Jan 26 19:18 5030 id=/355 term=0 exit=0
pts/380 Jan 27 18:22 10760 id=/380 term=0 exit=0
pts/390 Jan 26 22:53 14159 id=/390 term=0 exit=0
pts/393 Jan 26 23:14 14623 id=/393 term=0 exit=0
pts/408 Jan 27 02:02 20016 id=/408 term=0 exit=0
pts/430 Jan 28 15:47 9906 id=/430 term=0 exit=0
pts/433 Jan 27 23:45 5913 id=/433 term=0 exit=0
pts/438 Jan 28 01:34 14804 id=/438 term=0 exit=0
pts/439 Jan 28 15:47 14849 id=/439 term=0 exit=0
pts/452 Jan 28 21:42 18896 id=/452 term=0 exit=0
pts/454 Jan 29 00:02 21646 id=/454 term=0 exit=0
pts/455 Jan 29 13:13 22398 id=/455 term=0 exit=0
pts/457 Jan 30 14:53 10032 id=/457 term=0 exit=0
pts/461 Jan 31 13:55 12753 id=/461 term=0 exit=0
pts/475 Jan 31 15:47 4339 id=/475 term=0 exit=0
pts/479 Jan 31 18:17 4573 id=/479 term=0 exit=0
pts/484 Jan 31 20:06 6493 id=/484 term=0 exit=0
pts/485 Feb 1 09:39 6558 id=/485 term=0 exit=0
pts/503 Feb 2 18:44 32159 id=/503 term=0 exit=0
pts/505 Feb 1 18:56 4544 id=/505 term=0 exit=0
pts/511 Feb 2 17:33 11988 id=/511 term=0 exit=0
pts/513 Feb 3 23:04 27548 id=/513 term=0 exit=0
pts/519 Feb 3 15:46 3133 id=/519 term=0 exit=0
pts/521 Feb 3 16:20 17533 id=/521 term=0 exit=0
pts/523 Feb 3 16:43 22362 id=/523 term=0 exit=0
pts/533 Feb 5 01:59 19432 id=/533 term=0 exit=0
pts/552 Feb 5 14:59 3719 id=/552 term=0 exit=0
pts/557 Feb 5 19:10 13128 id=/557 term=0 exit=0
pts/563 Feb 5 21:20 14596 id=/563 term=0 exit=0
pts/565 Feb 6 23:37 14795 id=/565 term=0 exit=0
pts/593 Feb 8 14:40 22384 id=/593 term=0 exit=0
pts/596 Feb 7 00:03 23797 id=/596 term=0 exit=0
pts/597 Feb 7 20:56 23896 id=/597 term=0 exit=0
pts/601 Feb 7 20:09 25032 id=/601 term=0 exit=0
pts/603 Feb 7 20:12 25130 id=/603 term=0 exit=0
pts/607 Feb 7 23:09 25571 id=/607 term=0 exit=0
pts/610 Feb 7 22:50 25760 id=/610 term=0 exit=0
pts/622 Feb 8 15:51 1938 id=/622 term=0 exit=0
pts/628 Feb 8 16:30 2397 id=/628 term=0 exit=0
pts/632 Feb 8 22:36 5509 id=/632 term=0 exit=0
pts/634 Feb 8 23:33 5871 id=/634 term=0 exit=0
pts/637 Feb 9 11:14 18247 id=/637 term=0 exit=0
pts/639 Feb 9 11:15 18476 id=/639 term=0 exit=0
pts/642 Feb 9 11:53 18717 id=/642 term=0 exit=0
pts/644 Feb 9 19:20 20330 id=/644 term=0 exit=0
pts/646 Feb 12 11:59 20402 id=/646 term=0 exit=0
pts/650 Feb 10 15:54 26138 id=/650 term=0 exit=0
pts/663 Feb 11 14:54 14017 id=/663 term=0 exit=0
pts/665 Feb 11 14:54 14172 id=/665 term=0 exit=0
pts/668 Feb 11 15:53 21842 id=/668 term=0 exit=0
pts/673 Feb 12 21:43 0 id=/673 term=0 exit=0
pts/677 Feb 13 20:50 20958 id=/677 term=0 exit=0
pts/679 Feb 12 21:46 0 id=/679 term=0 exit=0
root ? pts/688 Feb 13 15:53 ? 1886 (:0.0)
pts/689 Feb 26 16:55 0 id=/689 term=0 exit=0
pts/697 Feb 14 00:03 9656 id=/697 term=0 exit=0
pts/699 Feb 14 00:16 9902 id=/699 term=0 exit=0
pts/701 Feb 15 16:51 10058 id=/701 term=0 exit=0
pts/716 Feb 15 08:44 1159 id=/716 term=0 exit=0
pts/722 Feb 15 19:51 22641 id=/722 term=0 exit=0
pts/732 Feb 15 19:45 29328 id=/732 term=0 exit=0
pts/734 Feb 17 22:17 30394 id=/734 term=0 exit=0
pts/760 Feb 16 21:33 8466 id=/760 term=0 exit=0
pts/762 Feb 16 19:45 16020 id=/762 term=0 exit=0
pts/763 Feb 16 19:55 22522 id=/763 term=0 exit=0
pts/765 Feb 16 20:24 28372 id=/765 term=0 exit=0
pts/775 Feb 17 15:59 10562 id=/775 term=0 exit=0
pts/780 Feb 17 23:40 21000 id=/780 term=0 exit=0
pts/783 Feb 17 23:44 21300 id=/783 term=0 exit=0
pts/784 Feb 17 23:48 21361 id=/784 term=0 exit=0
pts/785 Feb 18 14:25 22364 id=/785 term=0 exit=0
pts/787 Feb 18 15:22 24049 id=/787 term=0 exit=0
pts/789 Feb 18 17:42 24706 id=/789 term=0 exit=0
pts/791 Feb 20 12:57 26191 id=/791 term=0 exit=0
pts/804 Feb 20 23:29 21109 id=/804 term=0 exit=0
pts/820 Feb 21 15:32 7106 id=/820 term=0 exit=0
pts/836 Feb 21 15:32 8204 id=/836 term=0 exit=0
pts/846 Feb 21 16:13 12509 id=/846 term=0 exit=0
pts/847 Feb 21 17:29 18234 id=/847 term=0 exit=0
pts/848 Feb 21 16:36 18300 id=/848 term=0 exit=0
pts/856 Feb 21 21:19 22064 id=/856 term=0 exit=0
pts/857 Feb 23 20:14 26481 id=/857 term=0 exit=0
pts/870 Feb 23 02:02 26584 id=/870 term=0 exit=0
pts/872 Feb 23 22:09 17931 id=/872 term=0 exit=0
pts/874 Feb 23 23:15 18585 id=/874 term=0 exit=0
pts/875 Feb 24 14:49 22564 id=/875 term=0 exit=0
pts/879 Feb 25 14:30 30864 id=/879 term=0 exit=0
pts/881 Feb 24 20:03 31058 id=/881 term=0 exit=0
pts/884 Feb 25 14:30 32230 id=/884 term=0 exit=0
pts/888 Feb 25 10:43 9761 id=/888 term=0 exit=0
pts/890 Feb 26 00:58 1657 id=/890 term=0 exit=0
pts/892 Feb 26 12:33 7137 id=/892 term=0 exit=0
pts/894 Feb 26 15:42 9359 id=/894 term=0 exit=0
pts/896 Feb 26 23:52 10279 id=/896 term=0 exit=0
pts/899 Feb 28 01:28 13968 id=/899 term=0 exit=0
pts/901 Feb 27 18:18 14201 id=/901 term=0 exit=0
pts/902 Feb 27 20:10 14261 id=/902 term=0 exit=0
pts/904 Feb 28 17:19 15537 id=/904 term=0 exit=0
pts/906 Feb 28 17:24 15634 id=/906 term=0 exit=0
pts/908 Feb 28 21:22 15768 id=/908 term=0 exit=0
pts/910 Mar 1 08:30 19610 id=/910 term=0 exit=0
pts/911 Mar 1 14:51 20410 id=/911 term=0 exit=0
pts/914 Mar 1 20:45 20555 id=/914 term=0 exit=0
pts/915 Mar 2 01:16 20782 id=/915 term=0 exit=0
pts/918 Mar 2 10:52 22549 id=/918 term=0 exit=0
pts/920 Mar 2 18:44 22643 id=/920 term=0 exit=0
pts/922 Mar 3 17:03 24053 id=/922 term=0 exit=0
pts/924 Mar 2 22:46 24131 id=/924 term=0 exit=0
pts/925 Mar 2 23:01 24196 id=/925 term=0 exit=0
pts/926 Mar 2 22:55 24240 id=/926 term=0 exit=0
pts/929 Mar 4 21:09 24583 id=/929 term=0 exit=0
pts/931 Mar 3 15:35 25313 id=/931 term=0 exit=0
pts/934 Mar 3 16:27 25440 id=/934 term=0 exit=0
pts/936 Mar 5 14:41 19833 id=/936 term=0 exit=0
pts/937 Mar 5 15:11 21518 id=/937 term=0 exit=0
pts/939 Mar 7 01:08 21628 id=/939 term=0 exit=0
pts/953 Mar 6 21:59 30731 id=/953 term=0 exit=0
pts/972 Mar 7 10:18 439 id=/972 term=0 exit=0
pts/1009 Mar 7 00:34 8499 id=/100 term=0 exit=0
pts/1018 Mar 7 00:51 8893 id=/101 term=0 exit=0
pts/1023 Mar 7 01:02 9331 id=/102 term=0 exit=0
root ? pts/1032 Mar 7 01:55 ? 10459 (192.168.1.2)
root ? pts/1034 Mar 7 01:59 ? 10626 (192.168.1.2)
pts/1037 Mar 7 10:14 11927 id=/103 term=0 exit=0
pts/1048 Mar 7 10:24 12729 id=/104 term=0 exit=0
pts/1054 Mar 7 11:16 13545 id=/105 term=0 exit=0
root ? pts/1059 Mar 7 15:44 ? 14936 (192.168.1.2)
root ? pts/1060 Mar 7 17:22 ? 15115 (192.168.1.2)
root ? pts/1065 Mar 8 20:18 ? 4570 (192.168.1.2)
root ? pts/1066 Mar 9 12:23 ? 7920 (192.168.1.2)
root ? pts/1069 Mar 9 12:40 ? 8032 (192.168.1.2)
root ? pts/1071 Mar 9 21:18 ? 8149 (192.168.1.2)
root ? pts/1072 Mar 9 22:47 ? 8203 (192.168.1.2)
root ? pts/1074 Mar 10 00:03 ? 11198 (192.168.1.2)
root ? pts/1075 Mar 10 00:24 ? 11253 (192.168.1.2)
root ? pts/1078 Mar 10 15:07 ? 12047 (192.168.1.2)
root ? pts/1079 Mar 11 15:48 ? 17048 (192.168.1.2)
root ? pts/1080 Mar 11 19:07 ? 17207 (192.168.1.2)
root ? pts/1081 Mar 11 20:11 ? 17255 (192.168.1.2)
root ? pts/1083 Mar 11 22:16 ? 17342 (192.168.1.2)
root ? pts/1085 Mar 12 00:16 ? 21532 (192.168.1.2)
root ? pts/1087 Mar 12 00:28 ? 21697 (192.168.1.2)
root ? pts/1094 Mar 12 14:10 ? 29945 (192.168.1.2)
root ? pts/1095 Mar 12 23:44 ? 30052 (192.168.1.2)
root ? pts/1097 Mar 13 18:49 ? 8268 (192.168.1.2)
root ? pts/1100 Mar 13 20:31 ? 8487 (192.168.1.2)
root ? pts/1101 Mar 13 21:11 ? 8547 (192.168.1.2)
root ? pts/1103 Mar 13 21:46 ? 8871 (192.168.1.2)
root ? pts/1105 Mar 13 21:48 ? 8948 (192.168.1.2)
root ? pts/1106 Mar 13 23:28 ? 9022 (192.168.1.2)
root ? pts/1109 Mar 14 00:45 ? 15072 (192.168.1.2)
root ? pts/1111 Mar 14 02:32 ? 15163 (192.168.1.2)
root ? pts/1117 Mar 14 02:54 ? 15696 (192.168.1.2)
root ? pts/1125 Mar 14 12:39 ? 20993 (192.168.1.2)
root ? pts/1128 Mar 14 13:00 ? 23034 (192.168.1.2)
pts/1138 Mar 14 13:20 23589 id=/113 term=0 exit=0
root ? pts/1132 Mar 14 13:15 ? 23360 (192.168.1.2)
pts/1144 Mar 14 15:20 24806 id=/114 term=0 exit=0
root ? pts/1143 Mar 14 15:15 ? 24669 (192.168.1.2)
root ? pts/1145 Mar 14 17:32 ? 25981 (192.168.1.2)
root ? pts/1147 Mar 14 19:16 ? 26742 (192.168.1.2)
pts/1150 Mar 14 19:41 27076 id=/115 term=0 exit=0
root ? pts/1154 Mar 14 20:05 ? 27298 (192.168.1.2)
root ? pts/1157 Mar 15 13:01 ? 9610 (192.168.1.2)
root ? pts/1158 Mar 15 16:50 ? 10640 (192.168.1.2)
root ? pts/1161 Mar 15 20:45 ? 11718 (192.168.1.2)
root ? pts/1180 Mar 15 21:53 ? 13435 (192.168.1.2)
root ? pts/1182 Mar 15 21:53 ? 13506 (192.168.1.2)
root ? pts/1185 Mar 15 21:56 ? 13636 (192.168.1.2)
root ? pts/1187 Mar 15 21:59 ? 13731 (192.168.1.2)
root ? pts/1190 Mar 15 22:35 ? 14039 (192.168.1.2)
root ? pts/1225 Mar 17 13:03 ? 11730 (192.168.1.2)
root ? pts/1226 Mar 17 16:26 ? 12836 (192.168.1.2)
root ? pts/1227 Mar 17 17:38 ? 13172 (192.168.1.2)
root ? pts/1228 Mar 17 19:22 ? 13673 (192.168.1.2)
root ? pts/1229 Mar 17 19:34 ? 13776 (192.168.1.2)
root + pts/1230 Mar 17 21:52 . 14400 (192.168.1.2)

* in netstat i see only my ssh connection..
* checked *chkrootkit* and nothing founded...
its home server
