nanog mailing list archives

Re: just seen my first IPv6 network abuse scan, is this the start for more?


From: Seth Mattinen <sethm () rollernet us>
Date: Fri, 03 Sep 2010 17:31:10 -0700

On 9/3/2010 17:12, Owen DeLong wrote:
I was not attempting to defend security through obscurity. It doesn't ultimately help at all.

However, compared to the network and other resource costs of scanning, even at more than a billion pps, I think there 
will be more effective vectors of attack that are more likely to be used in IPv6. In IPv4, an exhaustive scan is 
quite feasible. In IPv6, scanning a single subnet is 4 billion times harder than scanning the entire IPv4 Internet.

My point isn't that hiding hosts in arbitrarily large address space makes them safe. My point is that scanning is not 
the vector by which they are most likely to get discovered.


Even so, it won't stop the uninitiated from scanning the crap out of
IPv6 space.

~Seth


Current thread: