[nsp-sec] Odd packets from 255.127.0.0

[Wilson, Jeff]

> Looking through my flow logs, the first I saw of them was at 16:58 EDT 
> (or 20:58 GMT) on Oct 5th.

If it helps to have visibility from customer sites ... speaking for AS 30674 (129.62.0.0/16), our first sighting was 16:12 CDT (21:12 GMT). I have dark-net logs, but not flow logs, so I don't have information on where it originated. We peer with AS's 22645, 16905, and 7459.

Regards,
Jeff

--

jeff_wilson at baylor.edu
ITS - Networking Services
(254) 710 4615