SSH Honeypot results

So after leaving the honeypot up for one week it attracted almost 41000 attacks, including 21000 from a single IP address. The below list is the source countries and number of attacks ranked by size. There is no surprise where the bulk of the attacks came from but I was surprised by the single dedicated attack from Brazil, which all came in within a 1 hour period, so someone took a keen interest in trying their luck. There were some pretty unusual places, such as Iran, some Caribbean Islands, Mid-Atlantic Islands etc…but overall it was what I suspected. I thought there’d be more from Russia to be honest, but I guess their hackers are engaged elsewhere at the moment.

BRAZIL: 21626
CHINA: 10579
AUSTRALIA: 710
UNITED STATES OF AMERICA: 688
THAILAND: 647
VIETNAM: 646
FRANCE: 570
SOUTH KOREA: 494
SINGAPORE: 463
INDIA: 382
GERMANY: 369
SWEDEN: 352
RUSSIAN FEDERATION: 343
UNKNOWN: 340
INDONESIA: 307
NETHERLANDS: 258
LITHUANIA: 247
CANADA: 245
IRAN: 163
UNITED KINGDOM: 150
MALAYSIA: 147
IRAQ: 87
SPAIN: 83
UNITED ARAB EMIRATES: 78
JAMAICA: 71
MOROCCO: 42
BANGLADESH: 41
TURKIYE: 41
BENIN: 40
JAPAN: 40
ZIMBABWE: 38
MEXICO: 34
COLOMBIA: 32
ETHIOPIA: 31
KENYA: 30
TUNISIA: 26
ALGERIA: 17
CABO VERDE: 6
RWANDA: 4
BELGIUM: 2
ITALY: 2
SWITZERLAND: 2
AFGHANISTAN: 1
AUSTRIA: 1
CHILE: 1
GEORGIA: 1
KUWAIT: 1
PAKISTAN: 1
POLAND: 1
UKRAINE: 1

TOTAL: 40485

I will leave the interactive map up for those who wish to browse, link on the previous post.