How does this link show this specific attack? As far as I understand, ipviking simply hosts honeypots around the world and uses those to graph "attacks" agains

How does this link show this specific attack? As far as I understand, ipviking simply hosts honeypots around the world and uses those to graph "attacks" against IP blocks, etc. I would very much like someone to correct me if this assumption is incorrect, because it'd be neat to actually watch targeted DDoS attacks, but I don't think that's what ipviking is offering.