Strange SSH procces

Freddy · January 12th, 2007, 5:21 AM

Hi, in the WHM CPU/Memory/MySQL Usage , i been seen this proces for a week already, and although i change my password .., it keeps showing.. :

sshd 0.22 0.07 0.0
Top Process %CPU 1.0 sshd: unknown [net]
Top Process %CPU 0.5 sshd: unknown [net]

Can you tell me what can i do to stop this.., it seems like someone its connecting to SSH...

**Brandonnn** · January 12th, 2007, 5:23 AM

Quote:

Originally Posted by Freddy

Hi, in the WHM CPU/Memory/MySQL Usage , i been seen this proces for a week already, and although i change my password .., it keeps showing.. :

sshd 0.22 0.07 0.0
Top Process %CPU 1.0 sshd: unknown [net]
Top Process %CPU 0.5 sshd: unknown [net]

Can you tell me what can i do to stop this.., it seems like someone its connecting to SSH...

I've seen the same thing for about a week now on my Dedi as well.... don't know what it is... except I don't see them anymore... but they were there last week for sure.

**tch3** · January 12th, 2007, 6:44 AM

Nothing shows up in the logs? If not, turn up the LogLevel in the sshd_config.

If you think someone is trying to connect to ssh who shouldn't be, you could do a couple of things.

1. Change the port # on which sshd listens.
2. I like using the AllowGroups or AllowUsers option in sshd_config (just make sure you're either in the allowed group or an allowed user. Otherwise, you'll lock yourself out.

January 12th, 2007, 5:21 AM	#1 (permalink)
Freddy Registered User Fresh Surpasser Joined in Oct 2005 19 posts Gave thanks: 0 Thanked 0 times	Strange SSH procces Hi, in the WHM CPU/Memory/MySQL Usage , i been seen this proces for a week already, and although i change my password .., it keeps showing.. : sshd 0.22 0.07 0.0 Top Process %CPU 1.0 sshd: unknown [net] Top Process %CPU 0.5 sshd: unknown [net] Can you tell me what can i do to stop this.., it seems like someone its connecting to SSH...

January 12th, 2007, 6:44 AM	#3 (permalink)
tch3 Destroyer of Evil Robots Excelling Contributor Joined in Oct 2003 Lives in Atlanta, GA 760 posts Gave thanks: 17 Thanked 9 times	Nothing shows up in the logs? If not, turn up the LogLevel in the sshd_config. If you think someone is trying to connect to ssh who shouldn't be, you could do a couple of things. 1. Change the port # on which sshd listens. 2. I like using the AllowGroups or AllowUsers option in sshd_config (just make sure you're either in the allowed group or an allowed user. Otherwise, you'll lock yourself out. __________________ clair http://tch3.com (dedicated)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)