IP Viking - DDOS?

satanicguardian · 3 Dec 2014 at 13:59

Hi guys,

Just found IP Viking's live map, very interesting to look at!

What is it in St Louis, USA that is so interesting that people are firing so many DDOS attacks at it?

http://map.ipviking.com/

(Forgive me if this is a stupid question, all google seems to give me is it's something to do with WoW, but there has to be more to it than just that! :O

NexusK · 3 Dec 2014 at 14:01

No idea but .. pew pew!

Richand · 3 Dec 2014 at 14:07

Grande communications which are a bit like our virgin media in the states.

Cosimo · 3 Dec 2014 at 14:12

Persistent:

Kiyoshi · 3 Dec 2014 at 14:19

Ferguson?

leaskovski · 3 Dec 2014 at 14:23

Wooh! Now they should have had that in Hackers instead of flying around what looked like a bunch of skyscrapers or virtual chassis.

benjii · 3 Dec 2014 at 14:54

Anyone just see the massive amount of attacks coming from China and Taiwan?

TheBDog · 3 Dec 2014 at 15:07

99.9999% of the targets are the US. Cray cray!

Casdawer · 3 Dec 2014 at 15:28

Is this real?

I can't believe that pretty much all the attacks are from the UK against the US!

PapaLazaru · 3 Dec 2014 at 15:29

What a cool website. Would be sweet to run this as my desktop background.

Mynight · 3 Dec 2014 at 15:30

Its always against the USA on that site

.

PapaLazaru said:
What a cool website. Would be sweet to run this as my desktop background.

I tried but I couldnt get it working

.

twist3d0n3 · 3 Dec 2014 at 15:32

jesus, uk just did a mega bomb on usa xD

PapaLazaru · 3 Dec 2014 at 15:32

Mynight said:
I tried but I couldnt get it working .

Yeah, I can get it to work, but not live.

xbenjiiman · 3 Dec 2014 at 15:34

Some British and Russian botnets

twist3d0n3 · 3 Dec 2014 at 15:36

even the americans are attacking america

russell664 · 3 Dec 2014 at 15:37

This is all cray cray!

TommyV · 3 Dec 2014 at 15:40

That's actually quite mesmerising to watch.

xbenjiiman · 3 Dec 2014 at 15:40

Also for anyone wondering, an explanation of how it works: http://www.quora.com/Network-Security/How-does-the-Norse-IPViking-Live-product-work

They create honeypots, which are basically mouse traps for attackers. These honeypots spoof as enterprises, banks etc which are distributed worldwide. They have over 5 million emulations towards the internet. These emulations include users, server, infrastructure.
Attackers excel in exploiting systems which they know very well.
To trap maximum type of attackers Norse creates versatile honeypots which mimic as Microsoft Exchange servers, Linux systems, ATMs etc.

When some attackers, attacks one of their honeypots, they keep track of that IP. Using the traffic data collected from these honeypots, they feed data to their big data analytics platform to make sense out of that data.

So when you see an entry in target list, then its one of their deployed honeypots and when you see entry in attacker list, then it show who and from where attack is taking place.

russell664 · 3 Dec 2014 at 15:45

*SNIP*

Will Gill · 3 Dec 2014 at 15:48

xbenjiiman said:
Also for anyone wondering, an explanation of how it works: http://www.quora.com/Network-Security/How-does-the-Norse-IPViking-Live-product-work

Very interesting, thanks :cool: