[42635] in North American Network Operators' Group
Re: Worm probes
daemon@ATHENA.MIT.EDU (sigma@pair.com)
Tue Sep 18 15:15:10 2001
Message-ID: <20010918182136.39227.qmail@smx.pair.com>
From: sigma@pair.com
In-Reply-To: <20010918141737.B27971@puck.nether.net> from Jared Mauch at "Sep 18, 1 02:17:37 pm"
To: nanog@merit.edu
Date: Tue, 18 Sep 2001 14:21:35 -0400 (EDT)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
> I think it scans your local /16
>
> I've seen other scans from the /16 that my machines reside in.
I believe it also moves up to the /8 level. The overwhelming majority of
our scans correspond to the same /8 our netblocks are in, as well as the
same /16 blocks.
Kevin
