nanog mailing list archives

Re: Hurricane Electric Tunnelbroker staff?


From: Bacon Zombie <baconzombie () gmail com>
Date: Sun, 23 Dec 2012 22:18:02 +0000

Can I ask why you count a port scan at something bad?
Or is it just the length of time it has been running for and it re-running
the same scan repetitively?



ฤ๊๊๊๊๊็็็็็๊๊๊๊๊็็็็ ฮ้้้้้้้้้้้้้้้้้้้้้้้้้้้้้
ฦ้้้้้็็็็็้้้้้็็็็็้้้้้้้้็


On 23 December 2012 05:31, Ben Carleton <ben () bencarleton com> wrote:

Hi folks,

I am seeing an IPv6-connected host on my network (which is on a HE.net
tunnel) apparently being portscanned by an HE server at 2001:470:0:64::2
for about the last hour or so. It is trying to hit several different ports
four times each before moving on and eventually repeating itself.

If anyone from HE can shed some light on what's going on here it would be
greatly appreciated, I can provide the IP of the host in question off-list
if needed.

Thanks,
-- Ben




-- 


BaconZombie

LOAD "*",8,1

Current thread: