R
Rob
Guest
If you've seen this in top or in a ps, you're likely not being attacked. It's indicating root is logged in securely, but not through a tty (no tty).. like through sftp, rsync, scp, etc..
You could always run netstat however to verify it's a friendly that's on there.. maybe your backup server or something..
You could always run netstat however to verify it's a friendly that's on there.. maybe your backup server or something..