<html><head><style type='text/css'>body { font-family: 'Times New Roman'; font-size: 12pt; color: #000000}</style></head><body>Probably not spoofed, I see a lot of scanning from China.<br><br>route: 121.8.0.0/13<br>descr: From Guangdong Network of ChinaTelecom<br>origin: AS4134<br>mnt-by: MAINT-CHINANET<br>changed: dingsy@cndata.com 20060707<br>source: APNIC<br><br>person: Chinanet Hostmaster<br>nic-hdl: CH93-AP<br>e-mail: anti-spam@ns.chinanet.cn.net<br>address: No.31 ,jingrong street,beijing<br>address: 100032<br>phone: +86-10-58501724<br>fax-no: +86-10-58501724<br>country: CN<br>changed: dingsy@cndata.com 20070416<br>mnt-by: MAINT-CHINANET<br>source: APNIC<br><br>-Patrick<br><br>----- Original Message -----<br>From: "Rich Sena" <ras@thick.net><br>To: "NANOG" <nanog@merit.edu><br>Sent: Thursday, March 6, 2008 12:01:52 PM (GMT-0800) America/Los_Angeles<br>Subject: Scan traffic from 121.8.0.0/16<br><br><br>Anyone seeing anything similar - trying to determine if this is spoofed <br>etc...<br><br>-- <br>Rich Sena - ras@thick.net<br>ThickNET Consulting<br>"On the way to understanding; you understand, and forget."<br><br></body></html>