top - ssh sessions/processes

["Bret Stern" <bret_stern machinemanagement com>]

Customer just called about a Fedora 6 box with
an active hard disk. Ran top, and found 10 - 15 ssh tasks running.

This is NOT normal for the specific machine.

So, in /etc/ssh/sshd_config


I changed the listento port to 5675 and set

PermitRootLogin No
Protocol 2
ListenAddress   xx.xx.xx.xx  (to an internal ip address )


Any ideas. Hackers...Yum update

Which log can I look at to see WATZ-UP?

Bret Stern
Machine Management