[nsp-sec] SYN-ACK backscatter from 60.191.221.41:7000

[Michael Sinatra]

Our darknet is seeing a lot of SYN-ACK backscatter from 60.191.221.41, 
port 7000.

AS      | IP               | AS Name
4134    | 60.191.221.41    | CHINANET-BACKBONE No.31,Jin-rong Street

Not sure whether this is a targeted SYN-ACK attack of some sort or 
whether it is backscatter from a spoofed SYN flood to 60.191.221.41, 
port 7000.  You may want to check for flows toward 60.191.221.41 just to 
be on the safe side.

michael