[GLLUG] Getting hammered with connections to port 80

[John Winters]

On 29/09/18 11:31, Tim Woodall via GLLUG wrote:
> Does anyone know what these guys are trying to do?

DDoS attack?

> 
> These are the connections to my webserver (port 80) in the last five
> hours. Almost all of them did not actually make a get request.
> 
[snip]
>       18 192.168.5.129
>        2 192.168.6.129

These are in private IP address ranges, so they can't possibly have been 
expecting a response.  I'm surprised the packets even got routed to you.

John