weird server activity
i am facing this weird weird problem.
i had recently asked a programmer to work on my server.
i had given him root access.
whenever i login to my server it shows 2 users as loged in.
pts/0 and pts/7
pts/0 is me
but pts/7 is the other person logged in.
both the ips of pts0 and pts 7 are mine.
isnt that weird.
i tried killing pts/7 but it doesnt work.
also once when i was checking the activity of pts/7 it showed something like /var/qmail ns.server.com ....
i suspect that pts/7 is some bot masked as my ip, and its secretly using qmail to scan my emails.
what do you guys think?
anyway to check and secure my server.
