content: Please stop linking Norse IPViking. It's just a pretty map that they use to sell their security appliance with. It doesn't show actual real time DDOS's, just minor insignificant connections to various honeypot ports. You can send these guys a 20 byte packet, and have it show up as a big flashy attack on that map.