[GLLUG] Speculative IPv6 probing

Tim Woodall t at woodall.me.uk
Wed Sep 25 17:44:45 UTC 2019


I'm seeing probes obviously attempting to hunt for machines on IPv6.

These ips were all blocked by my firewall today alone:
DST=2001:08b0:fb02:8100:0216:3eff:fee0:0000
...
DST=2001:08b0:fb02:8100:0216:3eff:fee0:0020
DST=2001:08b0:fb02:8100:0216:3eff:fee0:7fff
...
DST=2001:08b0:fb02:8100:0216:3eff:fee0:801f
DST=2001:08b0:fb02:8100:0216:3eff:fee0:ffdf
...
DST=2001:08b0:fb02:8100:0216:3eff:fee0:ffff

They've got most of the address right (which presumably they've got via
a DNS lookup and assumed I'm using SLAAC - which I am)

Is this going to be the state of IPv6 going forwards? Or am I specially
privileged? Anyone else seeing anything like this. I'd have to go
through my logs to be sure but I think this has only been happening in
the last month or so.

Tim.




More information about the GLLUG mailing list