Unrelated to this disclosure, I have acquired quite a lot of Fail2Ban attack reports generated by hosts around the world. I put together an initial set of charts showing attacks by country; I was wondering if anyone had any ideas for interesting things that should be done to analyze/visualize the data.
The data set contains the IP addresses for attacker and victim, the date, and the service name for each of a couple million attack reports.
The data set contains the IP addresses for attacker and victim, the date, and the service name for each of a couple million attack reports.
edit: https://int80k.com/ftb/