2

Sometimes attacks are directed to this particular location(0°N 0°E) when looking at norsecorp:

map

Does this serve any purpose other than being a location for unknown destinations? How does an attack end up here?

2 Answers 2

1

Those tools use GeoIP databases that map IP addresses to approximate locations to display location data as here is no physical way to tell where data is actually flowing (and there's no guaranteed those DBs are true nor up to date).

Sometimes those databases don't know about a particular IP and return 0,0, which is what you see here.

1
0

As has been answered above it is most likely because there was no valid data for the geolocation field. The information provided by the likes of geoip is very approximate and does not have a high confidence level beyond the country of origin. When you are looking at the sources also consider the geolocation is for the observed IP and may not be where an attack is actually located

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .