[102885] in North American Network Operators' Group
RE: Scan traffic from 121.8.0.0/16
daemon@ATHENA.MIT.EDU (Tomas L. Byrnes)
Thu Mar 6 19:22:59 2008
Date: Thu, 6 Mar 2008 16:22:09 -0800
In-Reply-To: <Pine.LNX.4.64.0803061500590.21778@noc1>
From: "Tomas L. Byrnes" <tomb@byrneit.net>
To: "Rich Sena" <ras@thick.net>, <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
Have you queried the DShield database for the hosts you are seeing?
http://www.dshield.org/ipinfo.html?ip=3D add the IP after the =3D
=20
> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On=20
> Behalf Of Rich Sena
> Sent: Thursday, March 06, 2008 12:02 PM
> To: NANOG
> Subject: Scan traffic from 121.8.0.0/16
>=20
>=20
> Anyone seeing anything similar - trying to determine if this=20
> is spoofed etc...
>=20
> --
> Rich Sena - ras@thick.net
> ThickNET Consulting
> "On the way to understanding; you understand, and forget."
>=20
>=20
