[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SSH (what's this!!!)



Márcio Luciano Donada wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Today in the morning when I give a verified in the processes of a given
server noticed the following procedures for ssh, I found a little
strange as:

root     21274  1.0  0.0   9856  3384 ?        Ss   09:14   0:00 sshd:
unknown [priv]
root     21275  1.0  0.0   9860  3412 ?        Ss   09:14   0:00 sshd:
unknown [priv]
root     21276  1.0  0.0   9860  3412 ?        Ss   09:14   0:00 sshd:
unknown [priv]
sshd     21277  0.0  0.0   7124  1360 ?        S    09:14   0:00 sshd:
unknown [net]
sshd     21278  0.0  0.0   7128  1364 ?        S    09:14   0:00 sshd:
unknown [net]
sshd     21281  0.0  0.0   7128  1364 ?        S    09:14   0:00 sshd:
unknown [net]

Some idea?


what does lsof -i:22 give you? could be a ssh scanner, or something leaving open ssh connections.


--
8 out of 10 Owners who Expressed a Preference said Their Cats Preferred Techno.


Reply to: