The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Fake processes or what is this...?

Discussion in 'General Discussion' started by jeroman8, Jul 21, 2005.

  1. jeroman8

    jeroman8 Well-Known Member

    Joined:
    Mar 14, 2003
    Messages:
    410
    Likes Received:
    0
    Trophy Points:
    16
    I have many, many sshd processes and I can't login myself with SSH or sftp.
    Tried restarting sshd but it doesn't help. I just rebooted the server so hopefully I can get in and check what a hell i sgoing on here.

    Any info or experience about this appreciated!


    --------------------------------------------------------------------------------
    29721 (sshd)



    --------------------------------------------------------------------------------
    29732 (sshd) /usr/sbin/sshd /
    sshd: root [priv]


    --------------------------------------------------------------------------------
    29733 (sshd)



    --------------------------------------------------------------------------------
    29778 (sshd) /usr/sbin/sshd /
    sshd: root [priv]


    --------------------------------------------------------------------------------
    29779 (sshd)



    --------------------------------------------------------------------------------
    29823 (proftpd) /usr/sbin/proftpd /
    proftpd: (accepting connections)


    --------------------------------------------------------------------------------
    29847 (sshd) /usr/sbin/sshd /
    sshd: root [priv]


    --------------------------------------------------------------------------------
    29848 (sshd)
     
  2. jeroman8

    jeroman8 Well-Known Member

    Joined:
    Mar 14, 2003
    Messages:
    410
    Likes Received:
    0
    Trophy Points:
    16
    After reboot I could login and the SSHD processes is now down to only 2.
    I do not think it was anything suspicious, couldn't find anything on the server.
    Maybe it was just something that happens.
     
  3. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    You should install and run the latest versions of rkhunter and chkrootkit to be sure.
     
Loading...

Share This Page