Syn flood to TCP port 21 from priveleged port (80)

Oleg A. Arkhangelsky sysoleg at
Tue Nov 1 19:23:42 UTC 2016

01.11.2016, 22:06, "Eric Tykwinski" <eric-list at>:
> Oleg,
> I'm seeing the same to a single client here source IPs seem to be matching up as well.
> I attached a pcap, just so you can compare.

And the same sources: - - -

Massive DDoS against William Hill Organization Ltd?

wbr, Oleg.

"Anarchy is about taking complete responsibility for yourself."
      Alan Moore.

More information about the NANOG mailing list