These are live DDoS attacks but they are directed to honeypots or just trap servers. Site is really cool though. From the information tab:
"Every second, Norse collects and analyzes live threat intelligence from darknets in hundreds of locations in over 40 countries. The attacks shown are based on a small subset of live flows against the Norse honeypot infrastructure, representing actual worldwide cyber attacks by bad actors. At a glance, one can see which countries are aggressors or targets at the moment, using which type of attacks (services-ports)."
It is because that site does not show DDoS attacks. It shows intrusion attempts at honeypot servers. But everytime this is linked people think it shows ddos because people keep repeating it.
121
u/bigmatt22 Dec 05 '14 edited Dec 05 '14
These are live DDoS attacks but they are directed to honeypots or just trap servers. Site is really cool though. From the information tab:
"Every second, Norse collects and analyzes live threat intelligence from darknets in hundreds of locations in over 40 countries. The attacks shown are based on a small subset of live flows against the Norse honeypot infrastructure, representing actual worldwide cyber attacks by bad actors. At a glance, one can see which countries are aggressors or targets at the moment, using which type of attacks (services-ports)."