UPDATE
Counter measures can prevent these kind of scanning and spoofing with via network map apps
1-/8 pool with random ips and dhcp /32 netmask
a large pool with random ips+ hotspot 1 to 1 nat is very hard to scan for a (novak apk one click hackers)
random pool pic ex
11.54.203.33
11.188.234.11
11.233.43.12
next pool and so on
a 32 net mask on dhcp is a must with this setup + a 1 to 1 hotspot nat pool this must have be on same range as dhcp pool but different ips
like 11.0.0.10-11.0.1.254 this address transition will help !
2- a layer 7 rule to drop and log netcut mappers for extra security with regexp of netCut|arcai.com (detection 100%)
