[GLLUG] Getting hammered with connections to port 80

[Alistair Mann]

On 29/09/18 11:31, Tim Woodall via GLLUG wrote:
> Does anyone know what these guys are trying to do?
>
> These are the connections to my webserver (port 80) in the last five
> hours. Almost all of them did not actually make a get request.
Did you just get a new IP address? Sometimes I see traffic intended for 
the previous holder.

That there is no GET brings Port Knocking to mind.

Cheers,
-- 
Alistair Mann