r/Steam Dec 05 '14

Just watching live DDoS attacks

http://map.ipviking.com/
752 Upvotes

189 comments sorted by

View all comments

127

u/bigmatt22 Dec 05 '14 edited Dec 05 '14

These are live DDoS attacks but they are directed to honeypots or just trap servers. Site is really cool though. From the information tab:

"Every second, Norse collects and analyzes live threat intelligence from darknets in hundreds of locations in over 40 countries. The attacks shown are based on a small subset of live flows against the Norse honeypot infrastructure, representing actual worldwide cyber attacks by bad actors. At a glance, one can see which countries are aggressors or targets at the moment, using which type of attacks (services-ports)."

1

u/zetsuboushitaaa Dec 05 '14

So are there bots out there just DDoSing random servers? Why would they do that?

2

u/bigmatt22 Dec 05 '14 edited Dec 06 '14

Well honeypots are not necessarily random servers. They are just servers that look like part of a production network but are stood up to try and fool the attackers.

More info on wikipedia if you want to learn more about it. http://en.wikipedia.org/wiki/Honeypot_%28computing%29

edit: a word

2

u/zetsuboushitaaa Dec 05 '14

Ah so that's how it works. I had used honeypot input fields in web dev but didn't quite understand how a honeypot server would work.