Page 1 of 1

Why graph of SSH Usage shows 2 or even 4 users?

Posted: Thu Feb 18, 2016 3:53 pm
by conneXions
Hello all,
Am a newbie at managing servers and using vestacp.
So I'm sure this is a newbie question :)

about 10 days ago I recently sign up for self managed server, installed
centos 6 and then vestacp on it.

a few days back I noticed that the SSH Usage in the Graph tab intermittently
shows 2 or even 4 users.

clicking on 'Monthly' showed that this has been going on since about 8 or 9 days ago.

I've done some researching and realize that these are probably intrusion attempts.

Can the vestacp experts here confirm this?
Or is this a case of my server ALREADY been hacked into?


Thanks in advance!

PS the initial given root password was a 12 character password (which I only changed today).

Re: Why graph of SSH Usage shows 2 or even 4 users?

Posted: Thu Feb 18, 2016 6:28 pm
by tjebbeke
You can try to find out which users are logged in.

http://www.thegeekstuff.com/2009/03/4-w ... nux-system

Re: Why graph of SSH Usage shows 2 or even 4 users?

Posted: Mon Jan 01, 2018 8:45 pm
by Thunderchild
I am sorry to resurrect this but i have the same question. Does this graph indicate actual logged in users ? does it indicate connections via SSH but not necessarily log in's ? I too see constantly repeated connections made by 2 or even 4 users. Are there any "software" users related to vesta that could account for this?

Re: Why graph of SSH Usage shows 2 or even 4 users?

Posted: Mon Jan 01, 2018 8:59 pm
by Thunderchild
using the w command only shows me as a user even when the graph has just refreshed showing 2 ursers.