sshd taking 99% of my cpu

**kadessa** · 05-02-2005

I while ago I noticed my cpu was 100% load so I typed top and I found shh daemon was taking 99%, stopped the daemon and started it again and everything goes fine, but I did netstat and I got this:
tcp 1 1 192.168.1.4:ssh rd.centennialrd.c:59157 LAST_ACK
?? Confused ¿¿

**Flatline** · 05-02-2005

When I've seen sshd take up lots of CPU, it usually has been a DoS attempt.
Is there anything in /var/log/messages that looks suspicious? Try

Code:

cat /var/log/messages | grep ssh

and see what comes up...

Sorry, had to edit the command...got it wrong the first time

**Flatline** · 05-02-2005

You can also use the command

Code:

last

to see who has logged in. I would highly recommend checking, just to see if anyone actually gained access. If you just want to check the last 20 people who logged in, you could use

Code:

 last -20

or

Code:

 last -20 -a

if you want to see their hostname.

Thread Tools

Display

sshd taking 99% of my cpu

Posting Permissions