Skip to main content
Share Your Experience: Take the 2024 Developer Survey

New answers tagged

1 vote

Should I be worried about unusual SSH login attempts from unknown IP addresses?

In addition to all other answers, I'd like to point out that port knocking also exists as a solution to random IPs being able to access all kinds of ports they shouldn't. In my experience, it works ...
Nullcaller's user avatar
1 vote

Should I be worried about unusual SSH login attempts from unknown IP addresses?

Completely different approach, not applicable in all situations though: Would a VPN server running on your host be possible? Users with valid credentials would start the VPN and only then be able to ...
Ralph Kirchner's user avatar
2 votes

Should I be worried about unusual SSH login attempts from unknown IP addresses?

Yes, you should be worried about these attempts. Chinese state programmers, Russian state programmers, and ransomware gangs write automated programs to search for servers and, when a server is found, ...
Russell Hankins's user avatar
17 votes

Should I be worried about unusual SSH login attempts from unknown IP addresses?

How worried should I be about these attempts? Not particularly unless you are seeing specific usernames other than root which are actually found on your system. Are they likely part of a botnet ...
Austin Hemmelgarn's user avatar
37 votes
Accepted

Should I be worried about unusual SSH login attempts from unknown IP addresses?

That's just "normal". Any exposed server on the Internet is going to be scanned by malicious (and benign) bots. What you are seeing is brute force attempts. They are usually not targeted; ...
Kate's user avatar
  • 8,345

Top 50 recent answers are included