On Thu, May 18, 2017 at 10:06:46AM +0200, Rob Janssen wrote:
I think that is not a legitimate use but an attack
group that spoofs sender
addresses when sending their attacks and they use net-44 addresses as well.
To have that go down, more ISPs should implement BCP38 (source address filtering).
Yes, that is what it is almost certainly. For more information, go to
www.caida.org and search for 'telescope'.
- Brian