On Sep 13, 2023, at 20:38, Drew Weaver <drew.weaver@thenap.com> wrote: Has anyone else recently seen a spike of port 80 traffic being sent at seemingly random IP addresses that include the Pornhub host header? It may be related to this: <https://www.netscout.com/blog/asert/http-reflectionamplification-abusable-internet-censorship> [what-is-a-reflection-amplification-ddos-attack-blog-header_1600x900.jpg] HTTP Reflection/Amplification via Abusable Internet Censorship Systems<https://www.netscout.com/blog/asert/http-reflectionamplification-abusable-internet-censorship> netscout.com<https://www.netscout.com/blog/asert/http-reflectionamplification-abusable-internet-censorship> -------------------------------------------- Roland Dobbins <roland.dobbins@netscout.com>