this don't look good

[Stephen Adler]

guess what..... I've just issued a last -a on my PC and look what came
up... a bunch of people have broken into my root account. Any
suggestions as to how I should proceed?

root     pts/12       Wed Jan 25 06:49   still logged in
230.red-217-127-235.staticip.rima-tde.net
root     pts/10       Wed Jan 25 01:56   still logged in
230.red-217-127-235.staticip.rima-tde.net
root     pts/10       Tue Jan 24 23:03 - 23:40  (00:37)
62-14-84-170.inversas.jazztel.es
root     pts/10       Tue Jan 24 21:04 - 21:39  (00:34)
62-14-84-170.inversas.jazztel.es
root     pts/10       Tue Jan 24 20:20 - 20:52  (00:32)
230.red-217-127-235.staticip.rima-tde.net
root     pts/6        Tue Jan 24 20:00   still logged in
acd2d194.ipt.aol.com
root     pts/6        Tue Jan 24 15:17 - 19:57  (04:40)
acd2d194.ipt.aol.com
root     pts/6        Tue Jan 24 15:14 - 15:15  (00:00)
acd2d194.ipt.aol.com
root     pts/6        Tue Jan 24 14:02 - 15:14  (01:11)
acd2d194.ipt.aol.com
root     pts/6        Tue Jan 24 13:55 - 14:02  (00:06)
acd2d194.ipt.aol.com
root     pts/6        Tue Jan 24 13:29 - 13:55  (00:26)
acd2d194.ipt.aol.com
root     pts/6        Tue Jan 24 10:35 - 13:28  (02:53)
acd2d194.ipt.aol.com
root     pts/6        Tue Jan 24 10:31 - 10:34  (00:03)
acd2d194.ipt.aol.com
root     pts/12       Tue Jan 24 00:43 - 07:14  (06:30)
acd2d194.ipt.aol.com
root     pts/13       Tue Jan 24 00:02 - 00:03  (00:00)
217.127.235.230
root     pts/14       Mon Jan 23 23:58 - 00:42  (00:44)
acd2d194.ipt.aol.com
root     pts/13       Mon Jan 23 23:54 - 23:57  (00:02)
acd2d194.ipt.aol.com
root     pts/10       Mon Jan 23 23:01 - 01:10  (02:08)
230.red-217-127-235.staticip.rima-tde.net
root     pts/10       Mon Jan 23 21:17 - 21:18  (00:01)
accf43bc.ipt.aol.com
root     pts/10       Mon Jan 23 21:03 - 21:16  (00:12)
accf43bc.ipt.aol.com
root     pts/12       Mon Jan 23 20:57 - 00:09  (03:11)
62-14-84-170.inversas.jazztel.es
adler    pts/11       Mon Jan 23 20:56   still logged in    :0.0
root     pts/10       Mon Jan 23 20:54 - 21:03  (00:08)
accf43bc.ipt.aol.com
root     pts/11       Mon Jan 23 20:40 - 20:52  (00:11)
62-14-84-170.inversas.jazztel.es
daq      pts/10       Mon Jan 23 20:40 - 20:40  (00:00)
66.89.219.197.ptr.us.xo.net
root     pts/10       Mon Jan 23 20:23 - 20:38  (00:14)
athanor.cmm.upenn.edu