[GLLUG] Getting hammered with connections to port 80

John Winters john at sinodun.org.uk
Sat Sep 29 10:51:51 UTC 2018

On 29/09/18 11:31, Tim Woodall via GLLUG wrote:
> Does anyone know what these guys are trying to do?

DDoS attack?

> These are the connections to my webserver (port 80) in the last five
> hours. Almost all of them did not actually make a get request.
>       18
>        2

These are in private IP address ranges, so they can't possibly have been 
expecting a response.  I'm surprised the packets even got routed to you.


More information about the GLLUG mailing list