Scan traffic from 121.8.0.0/16

Fri Mar 7 00:22:09 UTC 2008

Have you queried the DShield database for the hosts you are seeing?

http://www.dshield.org/ipinfo.html?ip= add the IP after the =

> -----Original Message-----
> From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On 
> Behalf Of Rich Sena
> Sent: Thursday, March 06, 2008 12:02 PM
> To: NANOG
> Subject: Scan traffic from 121.8.0.0/16
> 
> 
> Anyone seeing anything similar - trying to determine if this 
> is spoofed etc...
> 
> --
> Rich Sena - ras at thick.net
> ThickNET Consulting
> "On the way to understanding; you understand, and forget."
> 
> 