sshd: [email protected]

[Rob]

If you've seen this in top or in a ps, you're likely not being attacked. It's indicating root is logged in securely, but not through a tty (no tty).. like through sftp, rsync, scp, etc..

You could always run netstat however to verify it's a friendly that's on there.. maybe your backup server or something..

 

[Jay]

I was trying to set up my dedi and I got this, thanks for the explanation.

The other articles I read were all technical jargon (blergh).

 

[Henry Todd]

Hate to open an old thread, but this was exactly it. Was running an scp session.

Thanks.

 

[Rob]

No problem Henry - welcome to the forum!