The two countries with the most computers, and thus the most SSH servers, have the most SSH attempts.Â
Two out of the three most populous nations have the most SSH attempts.
Not normalizing this for population means this is largely a map of which countries have the most computers.
Is that the location of the source IP adress?
I’m getting 1000s attempts every day, it’s annoying. I mean, i have fail2ban set up, but still. I wonder if it’s worth, reporting them to their ISPs
Should have explained the data more clearly. This is incoming attempts to login to a single internet facing server from all around the world. Not normalized to population or anything, just raw login attempt numbers counted by countries.
Do we really need every country in the graph?
I have been curious about logging and visualizing this myself. Did you figure it all out yourself or did you start with any guides/tutorials?
Is there a country south of Chile?
I have found that almost all the attempts are from a VPN or VPS anyway so its basically comes down to what country the attackers are renting from (or got access to).
9 comments
[deleted]
The two countries with the most computers, and thus the most SSH servers, have the most SSH attempts.Â
Two out of the three most populous nations have the most SSH attempts.
Not normalizing this for population means this is largely a map of which countries have the most computers.
Is that the location of the source IP adress?
I’m getting 1000s attempts every day, it’s annoying. I mean, i have fail2ban set up, but still. I wonder if it’s worth, reporting them to their ISPs
Should have explained the data more clearly. This is incoming attempts to login to a single internet facing server from all around the world. Not normalized to population or anything, just raw login attempt numbers counted by countries.
Do we really need every country in the graph?
I have been curious about logging and visualizing this myself. Did you figure it all out yourself or did you start with any guides/tutorials?
Is there a country south of Chile?
I have found that almost all the attempts are from a VPN or VPS anyway so its basically comes down to what country the attackers are renting from (or got access to).
Comments are closed.