What do u got in logs ? Any helpful message ?
On Thu, Feb 28, 2008 at 9:37 AM, Jeff D <[EMAIL PROTECTED]> wrote: > Márcio Luciano Donada wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Today in the morning when I give a verified in the processes of a given > > server noticed the following procedures for ssh, I found a little > > strange as: > > > > root 21274 1.0 0.0 9856 3384 ? Ss 09:14 0:00 sshd: > > unknown [priv] > > root 21275 1.0 0.0 9860 3412 ? Ss 09:14 0:00 sshd: > > unknown [priv] > > root 21276 1.0 0.0 9860 3412 ? Ss 09:14 0:00 sshd: > > unknown [priv] > > sshd 21277 0.0 0.0 7124 1360 ? S 09:14 0:00 sshd: > > unknown [net] > > sshd 21278 0.0 0.0 7128 1364 ? S 09:14 0:00 sshd: > > unknown [net] > > sshd 21281 0.0 0.0 7128 1364 ? S 09:14 0:00 sshd: > > unknown [net] > > > > Some idea? > > > > what does lsof -i:22 give you? could be a ssh scanner, or something > leaving open ssh connections. > > > -- > 8 out of 10 Owners who Expressed a Preference said Their Cats Preferred > Techno. > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > >
