just seen my first IPv6 network abuse scan, is this the start for more?

Dobbins, Roland rdobbins at arbor.net
Fri Sep 3 12:12:42 UTC 2010

On Sep 3, 2010, at 7:02 PM, Igor Ybema wrote:

>  The only traffic I saw on the subnet was normal/valid NA lookups from the router towards an
> increasing IPv6-address (starting with ::1, then ::2 etc).

This could be a deliberately-induced DDoS due to the annoying ND stuff in IPv6, or just an ICMP sweep.  Did it seem to concentrate on certain ranges, were the target addresses progressive, et. al.?

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

 	       Sell your computer and buy a guitar.

More information about the NANOG mailing list