Global Real Time Cyber Attack Map

[LS1Goat]

http://map.norsecorp.com/

St. Louis is getting hammered today.

[Scott Mc]

Are those lazer beams?

[Unicorn Jeff]

Wonder whats in St louis

[Tremor14]

i WONDER

[BoostedD1]

Blacks?!

BBQ?!

[slow99]

Wonder whats in St louis

The St Louis Fed is there. They run FRED - one of the most robust sets of economic data available. Who knows, but it's the first thing that crossed my mind.

[Binky]

WarGames.

"We're still here!!"

[MustangPoser]

This one is awesome: http://cybermap.kaspersky.com/

What's really interesting is that when SVO was consulting with blackwater, he was embedded with a top secret cyber security unit and had the opportunity to meet Eugene Kaspersky... He suggested they create an interactive graphic that displayed real time threats and make it public. They never gave him any credit.

[LS1Goat]

Boeing Defense, Space & Security is also right outside of St. Louis. Most likely, they are probably trying to interrupt/hack the Federal Reserve. They did it not too long ago, redirected a bunch of traffic to rogue servers that simulated FRED web pages.

[jw33]

I'll wait for svo to chime before jumping to any conclusions...

[abecx]

These are just reporting honeypots, doesnt really mean anything. Bots scan IP subnets of shitty data centers because they typically have old unmaintained crap. St. Louis I believe has an MAE which means they have a big online presence so this isnt surprising.

[S_K]

ATT has a huge voice and internet switching presence in St. Louis. Much of the cell phone to Internet traffic is routed to St. Louis.

Also home of the largest Internet 2 pop.

[Trip McNeely]

Must be a Gibson they are trying to hax0r.

[DamonH]

Bots scan IP subnets of shitty data centers because they typically have old unmaintained crap.

It's not just shitty datacenters, they hit everyone. I ran a kippo honeypot at my house for a while and got blasted from all over. I had more then 700,000 attempts to my U-Verse gateway in a month.

[IHaveAMustang]

We got hit overnight with a Crypto Virus. Unfortunately one PC and two Data servers were not fully patched and some files were encrypted.

Right now I am restoring shadow protect images from before we got hit, never been hit this "bad" before.