Skip to main content
Share Your Experience: Take the 2024 Developer Survey
37 votes
Accepted

Should I be worried about unusual SSH login attempts from unknown IP addresses?

That's just "normal". Any exposed server on the Internet is going to be scanned by malicious (and benign) bots. What you are seeing is brute force attempts. They are usually not targeted; ...
Kate's user avatar
  • 8,345
29 votes

Will installing a kernel mode driver onto a PC compromise the entire network it's connected to?

Is it possible? Could a kernel mode driver deeply compromise your computer?Yes, kernel mode driver have very high privileges on the system. Could a compromised computer affect the whole network it is ...
Steffen Ullrich's user avatar
17 votes

Should I be worried about unusual SSH login attempts from unknown IP addresses?

How worried should I be about these attempts? Not particularly unless you are seeing specific usernames other than root which are actually found on your system. Are they likely part of a botnet ...
Austin Hemmelgarn's user avatar
6 votes

Will installing a kernel mode driver onto a PC compromise the entire network it's connected to?

Another thing worth noting is that your computer has many kernel mode drivers and adding some random fly by night hardware might present a greater risk that you do not even know about. For the anti-...
le3th4x0rbot's user avatar
  • 3,239
2 votes

Will installing a kernel mode driver onto a PC compromise the entire network it's connected to?

It depends on what you mean by "compromising" the network. If you want to have as an invariant that "nothing untrusted is connected to the network", such that the network can be ...
R.. GitHub STOP HELPING ICE's user avatar
2 votes

Should I be worried about unusual SSH login attempts from unknown IP addresses?

Yes, you should be worried about these attempts. Chinese state programmers, Russian state programmers, and ransomware gangs write automated programs to search for servers and, when a server is found, ...
Russell Hankins's user avatar
1 vote

Why would an application I've never used show up on my NAT sessions?

The most likely way that snapchat shows up is, that some page you visited contains content from snapchat, e.g. https://www.snapchat.com/spotlight/W7_some_randow_characters. Note that if you use a ...
Ljm Dullaart's user avatar
  • 2,125
1 vote

Will installing a kernel mode driver onto a PC compromise the entire network it's connected to?

A kernel driver with full hardware access (typically kernel drivers need that to control the hardware) can do anything the processor can do with the hardware. For a driver accessing the network card, ...
U. Windl's user avatar
  • 193
1 vote

Should I be worried about unusual SSH login attempts from unknown IP addresses?

In addition to all other answers, I'd like to point out that port knocking also exists as a solution to random IPs being able to access all kinds of ports they shouldn't. In my experience, it works ...
Nullcaller's user avatar
1 vote

Should I be worried about unusual SSH login attempts from unknown IP addresses?

Completely different approach, not applicable in all situations though: Would a VPN server running on your host be possible? Users with valid credentials would start the VPN and only then be able to ...
Ralph Kirchner's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible