Syn flood to TCP port 21 from priveleged port (80)

[sysoleg at yandex.ru (Oleg A. Arkhangelsky)]

01.11.2016, 22:06, "Eric Tykwinski" <eric-list at truenet.com>:
> Oleg,
>
> I'm seeing the same to a single client here source IPs seem to be matching up as well.
> I attached a pcap, just so you can compare.
>

And the same sources:

141.138.128.0 - 141.138.135.255
194.73.173.0 - 194.73.173.127
95.131.184.0 - 95.131.191.255

Massive DDoS against William Hill Organization Ltd?

--?
wbr, Oleg.

"Anarchy is about taking complete responsibility for yourself."
????? Alan Moore.