Security Dashboard
Live SSH brute-force activity against this server, straight from fail2ban and the auth log.
loading…
Attack origins · geolocated
Each marker is an attacker network, sized by failed-attempt volume and placed by geolocation (approximate). Colours group by origin country.
By country
Attacks by network · ISP / ASN
Failed logins · last 14 days
Most-targeted usernames
Source: fail2ban (sshd jail) and the server's SSH authentication log, regenerated every 30 minutes. Internal/private ranges are excluded; only origin countries, networks (ISP / ASN), and aggregate counts are shown, no individual addresses, successful logins, or account detail. Geolocation and network attribution via ip-api.com.