It appears you have not registered with our community. To register please click here ...

Author Topic: ./ssh-scan 100 seen in top processes multiple times  (Read 2084 times)

dynaweb

  • <b>Canine Deamon</b>
  • Administrator
  • Sr. Member
  • *****
  • Posts: 493
  • Karma: +10/-0
  • Generic personal text here ...
    • MSN Messenger - danno_d_manno@yahoo.com
    • View Profile
    • DynaWeb Designs
    • Email
./ssh-scan 100 seen in top processes multiple times
« on: January 25, 2006, 10:04:39 AM »
This morning I noticed very high server load.  I checked top and found a bunch of these:
Code: [Select]
./ssh-scan 100Anyone have any idea about this?
Those who cannot learn from history are doomed to repeat it. -- Linux learns.

dynaweb

  • <b>Canine Deamon</b>
  • Administrator
  • Sr. Member
  • *****
  • Posts: 493
  • Karma: +10/-0
  • Generic personal text here ...
    • MSN Messenger - danno_d_manno@yahoo.com
    • View Profile
    • DynaWeb Designs
    • Email
./ssh-scan 100 seen in top processes multiple times
« Reply #1 on: January 26, 2006, 10:03:58 AM »
Looks like another /tmp dir exploit.  Found a psybnc in there.  Cleaned out the dir and reset cron to do cleaning automatically.  Load back down.  Should be ok now.
Those who cannot learn from history are doomed to repeat it. -- Linux learns.

 

Related Topics

  Subject / Started by Replies Last post
0 Replies
248 Views
Last post December 04, 2005, 03:41:26 AM
by Linux News
2 Replies
1402 Views
Last post March 21, 2006, 11:39:08 AM
by dynaweb
0 Replies
1327 Views
Last post September 11, 2006, 11:59:44 AM
by dynaweb
0 Replies
1511 Views
Last post October 02, 2006, 08:32:01 AM
by dynaweb