Why graph of SSH Usage shows 2 or even 4 users?

conneXions · Post by **conneXions** » Thu Feb 18, 2016 3:53 pm

Hello all,
Am a newbie at managing servers and using vestacp.
So I'm sure this is a newbie question :)

about 10 days ago I recently sign up for self managed server, installed
centos 6 and then vestacp on it.

a few days back I noticed that the SSH Usage in the Graph tab intermittently
shows 2 or even 4 users.

clicking on 'Monthly' showed that this has been going on since about 8 or 9 days ago.

I've done some researching and realize that these are probably intrusion attempts.

Can the vestacp experts here confirm this?
Or is this a case of my server ALREADY been hacked into?

Thanks in advance!

PS the initial given root password was a 12 character password (which I only changed today).

Post by **tjebbeke** » Thu Feb 18, 2016 6:28 pm

You can try to find out which users are logged in.

http://www.thegeekstuff.com/2009/03/4-w ... nux-system

Thunderchild · Post by **Thunderchild** » Mon Jan 01, 2018 8:45 pm

I am sorry to resurrect this but i have the same question. Does this graph indicate actual logged in users ? does it indicate connections via SSH but not necessarily log in's ? I too see constantly repeated connections made by 2 or even 4 users. Are there any "software" users related to vesta that could account for this?

Thunderchild · Post by **Thunderchild** » Mon Jan 01, 2018 8:59 pm

using the w command only shows me as a user even when the graph has just refreshed showing 2 ursers.

Vesta Control Panel - Forum