Comment by GoblinSlayer

The pattern described in the blog is that one ip makes 4-5 requests and never comes back.