sshd: root@notty



If you've seen this in top or in a ps, you're likely not being attacked. It's indicating root is logged in securely, but not through a tty (no tty).. like through sftp, rsync, scp, etc..

You could always run netstat however to verify it's a friendly that's on there.. maybe your backup server or something..

I was trying to set up my dedi and I got this, thanks for the explanation.

The other articles I read were all technical jargon (blergh).
Hate to open an old thread, but this was exactly it. Was running an scp session.