While doing some sunday maintenance on the digital ocean droplet that hosts this blog I noticed something creepy:
There were approximately 55k failed ssh login attempts for the root account.
This made me wonder:”where are these attacks coming from?”
So I threw together a quick and dirty python script to collate the ip’s, do a geo lookup on them, save this as a csv file, and finally use that in google fusion to create a heatmap.
You can watch the entire adventure here: