[102882] in North American Network Operators' Group
Re: Scan traffic from 121.8.0.0/16
daemon@ATHENA.MIT.EDU (Justin Shore)
Thu Mar 6 16:09:56 2008
Date: Thu, 06 Mar 2008 15:08:13 -0600
From: Justin Shore <justin@justinshore.com>
To: Rich Sena <ras@thick.net>
CC: NANOG <nanog@merit.edu>
In-Reply-To: <Pine.LNX.4.64.0803061500590.21778@noc1>
Errors-To: owner-nanog@merit.edu
Rich Sena wrote:
>
> Anyone seeing anything similar - trying to determine if this is spoofed
> etc...
I haven't picked up any SSH or telnet scans from that network. That's
what I'm looking for at the moment. The amount of scans we're getting
are quite impressive at times. I wish there was an easy way to automate
the care and feeding of my RTBH with this data (and some sanity checks).
Justin
