Lots more activity from France than I would have expected compared to other countries. Also lots more people using Amazon's infrastructure to scan the internet than I would have imagined.
Other than that it's about what you'd expect.
So far I don't find this to be overly practical because with the amount of IP addresses in the filter, the firewall takes forever to reload. (firewalld)
Funny, because the first thing I thought was how frustrating it was to read. The %s are not sorted by size in the pie chart, and they're not labelled other than by colour, so you can't read the % for each country.
The attempts per hour seems to cover more than 24 hours, but the dates aren't labelled. An aggregate chart bucketed by hour of day would be more interesting, since the actual rate is quite low and has a lot of variance - at this zoom level, it's basically noise.
I agree it looks pretty, though I'd take a table with some bar chart columns.
The charts are interactive, you can hover each slice to get names and percentages, or each name to find it on the chart.
I found it wasn't really worth doing more with the chart, since its purpose was really just comparing the largest offenders.
Regarding the time frames, the buttons in the top right allow choosing the time frame. today, yesterday, 48 hours, week, month, year.
I also slapped this together in half a day.. there is plenty of room for improvement, and more charts and options could easily be added.
I didn't take this very far because this was not my goal, it was just a quick idea to allow me to block others from being able to query my server while still allowing me access from anywhere in the world. The visualizations were just for fun.
Mmmm... I'm a bit surprised by France: 3rd country but... first french town is 29th (Lyon, only the 3rd city of the country) and no french subdivision in the top 40 ?????
Maybe some cross-checking would be welcomed, because it doesn't seem really consistent. Any explaination ?
I took all of the data and fed it into a database, then built a web interface so I could see the data better.
It's looking like this:
https://i.imgur.com/8G9GAUp.png
Lots more activity from France than I would have expected compared to other countries. Also lots more people using Amazon's infrastructure to scan the internet than I would have imagined.
Other than that it's about what you'd expect.
So far I don't find this to be overly practical because with the amount of IP addresses in the filter, the firewall takes forever to reload. (firewalld)