[159132] in North American Network Operators' Group
Hurricane Electric Tunnelbroker staff?
daemon@ATHENA.MIT.EDU (Ben Carleton)
Sun Dec 23 00:31:59 2012
Date: Sun, 23 Dec 2012 00:31:51 -0500
From: Ben Carleton <ben@bencarleton.com>
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi folks,
I am seeing an IPv6-connected host on my network (which is on a HE.net
tunnel) apparently being portscanned by an HE server at 2001:470:0:64::2
for about the last hour or so. It is trying to hit several different
ports four times each before moving on and eventually repeating itself.
If anyone from HE can shed some light on what's going on here it would
be greatly appreciated, I can provide the IP of the host in question
off-list if needed.
Thanks,
-- Ben
