Attacks began Aug 7th
literally 100's p/second, no doubt routed from elsewhere
Aug 7 19:26:28 openvpn[3973]: 185.49.126.9:1848 TLS: Initial packet from [AF_INET]185.49.126.9:1848 (via [AF_INET]108.xxx.xxx.xxx%eth0), sid=xxxxxxxxxxxx
Then this IP
Aug 7 19:27:16 openvpn[3973]: 45.88.230.205:34650 TLS: Initial packet from [AF_INET]45.88.230.205:34650 (via [AF_INET]108.xxx.xxx.xxx%eth0), sid=xxxxxxxxxx
Then this one
Aug 7 19:28:08 openvpn[3973]: 51.79.98.58:33239 TLS: Initial packet from [AF_INET]51.79.98.58:33239 (via [AF_INET]108.xxx.xxx.xxx%eth0), sid=xxxxxxxxxxxxx
Then they start over each taking a turn for a minute or two at 100+ requests per second.
literally 100's p/second, no doubt routed from elsewhere
Aug 7 19:26:28 openvpn[3973]: 185.49.126.9:1848 TLS: Initial packet from [AF_INET]185.49.126.9:1848 (via [AF_INET]108.xxx.xxx.xxx%eth0), sid=xxxxxxxxxxxx
Then this IP
Aug 7 19:27:16 openvpn[3973]: 45.88.230.205:34650 TLS: Initial packet from [AF_INET]45.88.230.205:34650 (via [AF_INET]108.xxx.xxx.xxx%eth0), sid=xxxxxxxxxx
Then this one
Aug 7 19:28:08 openvpn[3973]: 51.79.98.58:33239 TLS: Initial packet from [AF_INET]51.79.98.58:33239 (via [AF_INET]108.xxx.xxx.xxx%eth0), sid=xxxxxxxxxxxxx
Then they start over each taking a turn for a minute or two at 100+ requests per second.
Last edited: