On Thu, Feb 28, 2008 at 9:37 AM, Jeff D <
fixedored@gmail.com> wrote:
Márcio Luciano Donada wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Today in the morning when I give a verified in the processes of a given
> server noticed the following procedures for ssh, I found a little
> strange as:
>
> root 21274 1.0 0.0 9856 3384 ? Ss 09:14 0:00 sshd:
> unknown [priv]
> root 21275 1.0 0.0 9860 3412 ? Ss 09:14 0:00 sshd:
> unknown [priv]
> root 21276 1.0 0.0 9860 3412 ? Ss 09:14 0:00 sshd:
> unknown [priv]
> sshd 21277 0.0 0.0 7124 1360 ? S 09:14 0:00 sshd:
> unknown [net]
> sshd 21278 0.0 0.0 7128 1364 ? S 09:14 0:00 sshd:
> unknown [net]
> sshd 21281 0.0 0.0 7128 1364 ? S 09:14 0:00 sshd:
> unknown [net]
>
> Some idea?
>
what does lsof -i:22 give you? could be a ssh scanner, or something
leaving open ssh connections.
--
8 out of 10 Owners who Expressed a Preference said Their Cats Preferred
Techno.