[GLLUG] Speculative IPv6 probing
Tim Woodall
t at woodall.me.uk
Wed Sep 25 17:44:45 UTC 2019
I'm seeing probes obviously attempting to hunt for machines on IPv6.
These ips were all blocked by my firewall today alone:
DST=2001:08b0:fb02:8100:0216:3eff:fee0:0000
...
DST=2001:08b0:fb02:8100:0216:3eff:fee0:0020
DST=2001:08b0:fb02:8100:0216:3eff:fee0:7fff
...
DST=2001:08b0:fb02:8100:0216:3eff:fee0:801f
DST=2001:08b0:fb02:8100:0216:3eff:fee0:ffdf
...
DST=2001:08b0:fb02:8100:0216:3eff:fee0:ffff
They've got most of the address right (which presumably they've got via
a DNS lookup and assumed I'm using SLAAC - which I am)
Is this going to be the state of IPv6 going forwards? Or am I specially
privileged? Anyone else seeing anything like this. I'd have to go
through my logs to be sure but I think this has only been happening in
the last month or so.
Tim.
More information about the GLLUG
mailing list