Help - possibly hacked

[stevejobbers]

I accidentally left Remote Login running on my imac and noticed today that "sshd" commands were using 100% of my CPU. Does this mean someone was trying to brute force my machine?

Is there anything I can check? Logs files? Something to show if unknown users were trying to access my machine?

I've since turned off Remote Login but I'm a bit worried my machine could have been comprised.

Thanks for any help/suggestions!!!

 

[Stachelsk]

The console app would have some sort of sshd logging, I would think...

 

[applefan69]

you are smart to shut remote access off, and quick thinking. There is no garuntee that someone was trying to brute force their way in, but its also a possibility. So good thinking.

whats important is they dont have access to your computer anymore so your safe... so if it was someone trying to get into your computer they are back to square one ... for now. I would just keep an eye out for a while, im sure your fine though.