Hi,
Using the "last" command u can find out who is logging into your machine from what terminal,which machine,what user-id and the total login time.If u have suspicion about any user-id then just change the password of that id.
One more thing,see if u have .rhosts file in your system.If it is there, then remove that file.