If you've ever looked at that activity map before, it's always that active. This is nothing new.

Actually I was thinking it was the other way around, what with United Airlines and the NYSE.

This strikes me as corporate warfare. No governments necessarily involved.

FIND THE COMPUTER ROOM!

You contributed to me having a good laugh. Thanks!

Norse is just fearmongering. You would never see an actual attack that way.

Dont get tricked into thinking these attack maps have any meaning. It is just a way to show technoweenies something shiny so they think you have a hamdle on this hackers problem. Most of the bad traffic is running through proxies (many based in the us) anyway, and the only thing you'd see on a map like this is a really big ddos.

According to the Norse map posted earlier, China is doing most of the cyber attacking, but the US is now attacking China on a much smaller scale. http://map.norsecorp.com/

Not necessarily. That sort of attack is likely to illicit a real response, while simply pushing down their economy, slowly, can't (necessarily) trigger the sort of response that would lead to open hostilities.

More interesting than whether or not we are actively engaged in pushing the Chinese economy down is whether or not this is in retaliation for today's "unrelated" events that grounded all of UAL's planes for several hours and knocked the NYSE off-line for a significant period of time, or whether those same events are in retaliation for our pushing the Chinese economy down.

From my vantage point, today's attacks don't sound Chinese. They sound Russian. The Chinese are typically the stealthier type, while Putin and his cronies are more likely to crash the front gate with a bottle of vodka in one hand and a Kalashnikov in the other, singing songs in praise of the motherland... as for a motive for the Russians, I think retaliation for the economic sanctions we've pushed through the UN is motive enough.

Wait, like China is actually where zombies come from? Like in World War Z?

No. From another thread.... I decided to do a little digging. It appears Norse creates a honeypot to mimic specific network destinations to entice attacks. So, what we're seeing isn't an attack on a 'target' so much as Norse's honeypots being activated.

From their CTO: "We have a very large honeypot, where we have, at any given time, over 5m emulations towards the Internet. Meaning we emulate over 5m users, servers, infrastructures on the Internet. We mimic a bank. We put in place honeypots to mimic Microsoft Exchange servers, Linux systems, ATMs. We try to mimic as much as we can of the infrastructure online to make it look attractive to be attacked."

They also have administrative offices in St Louis and have admitted to having a lot of their honey pot location in the area in press releases.

It would appear I'm on the right track Still, quite odd that this 'security company' isn't able to identify the type of attack against their own honeypots. Or maybe just not willing to put that sort of info public?

You're reading the map backwards. See here for the live feed: http://map.norsecorp.com

There's several attacks targeting St. Louis right now. I pay attention to these things, and this is abnormal activity.

When fired upon, return the fire.

Hitting China while they are in the middle of a 1929 style market crash. Things are going to be interesting over the next couple years.

yes

Why would you think that?