[64768] in North American Network Operators' Group
Portscans/PROXY scans
daemon@ATHENA.MIT.EDU (John_York@Dell.com)
Sat Nov 1 16:09:16 2003
From: John_York@Dell.com
To: nanog@nanog.org
Date: Sat, 1 Nov 2003 15:08:09 -0600
Errors-To: owner-nanog-outgoing@merit.edu
Hey gang,
We're seeing an incredible amount of port- and proxy-scans from 211.0.0.0/8,
and 0 legitimate packets from the same range. I'm thinking about blocking
the entire /8, as noone on our network needs any contact with Asia (I belive
those addresses are all in Asia - correct me if I'm wrong). Has anyone here
blocked 211.? Any unexpected results when doing so?
Thanks,
John
