[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

just seen my first IPv6 network abuse scan, is this the start for more?

Subject: just seen my first IPv6 network abuse scan, is this the start for more?
From: rdobbins at arbor.net (Dobbins, Roland)
Date: Fri, 3 Sep 2010 12:12:42 +0000
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]>

On Sep 3, 2010, at 7:02 PM, Igor Ybema wrote:

>  The only traffic I saw on the subnet was normal/valid NA lookups from the router towards an
> increasing IPv6-address (starting with ::1, then ::2 etc).

This could be a deliberately-induced DDoS due to the annoying ND stuff in IPv6, or just an ICMP sweep.  Did it seem to concentrate on certain ranges, were the target addresses progressive, et. al.?

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

 	       Sell your computer and buy a guitar.

References:
- just seen my first IPv6 network abuse scan, is this the start for more?
  - From: igor at ergens.org (Igor Ybema)
- just seen my first IPv6 network abuse scan, is this the start for more?
  - From: matthias.flittner at de-cix.net (Matthias Flittner)
- just seen my first IPv6 network abuse scan, is this the start for more?
  - From: igor at ergens.org (Igor Ybema)

Prev by Date: ISP port blocking practice
Next by Date: ISP port blocking practice
Previous by thread: just seen my first IPv6 network abuse scan, is this the start for more?
Next by thread: just seen my first IPv6 network abuse scan, is this the start for more?
Index(es):
- Date
- Thread