bhan, the server under attack is a nginx rev. pxy