North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Portscans/PROXY scans

  • From: John_York
  • Date: Sat Nov 01 16:10:53 2003

Hey gang,

We're seeing an incredible amount of port- and proxy-scans from 211.0.0.0/8,
and 0 legitimate packets from the same range. I'm thinking about blocking
the entire /8, as noone on our network needs any contact with Asia (I belive
those addresses are all in Asia - correct me if I'm wrong). Has anyone here
blocked 211.? Any unexpected results when doing so?

Thanks,
John