[GLLUG] Getting hammered with connections to port 80
al at pectw.net
Sat Sep 29 12:31:10 UTC 2018
On 29/09/18 11:31, Tim Woodall via GLLUG wrote:
> Does anyone know what these guys are trying to do?
> These are the connections to my webserver (port 80) in the last five
> hours. Almost all of them did not actually make a get request.
Did you just get a new IP address? Sometimes I see traffic intended for
the previous holder.
That there is no GET brings Port Knocking to mind.
More information about the GLLUG