[GLLUG] Getting hammered with connections to port 80

Alistair Mann al at pectw.net
Sat Sep 29 12:31:10 UTC 2018

On 29/09/18 11:31, Tim Woodall via GLLUG wrote:
> Does anyone know what these guys are trying to do?
> These are the connections to my webserver (port 80) in the last five
> hours. Almost all of them did not actually make a get request.
Did you just get a new IP address? Sometimes I see traffic intended for 
the previous holder.

That there is no GET brings Port Knocking to mind.

Alistair Mann

More information about the GLLUG mailing list