Home Who is trying to SSH into my server?!
Post
Cancel

Who is trying to SSH into my server?!

While doing some sunday maintenance on the digital ocean droplet that hosts this blog I noticed something creepy:

There were approximately 55k failed ssh login attempts for the root account.

This made me wonder:”where are these attacks coming from?”

So I threw together a quick and dirty python script to collate the ip’s, do a geo lookup on them, save this as a csv file, and finally use that in google fusion to create a heatmap.

You can watch the entire adventure here:

This post is licensed under CC BY 4.0 by the author.