[159140] in North American Network Operators' Group
Re: Hurricane Electric Tunnelbroker staff?
daemon@ATHENA.MIT.EDU (Ben Carleton)
Sun Dec 23 17:32:10 2012
Date: Sun, 23 Dec 2012 17:32:06 -0500
From: Ben Carleton <ben@bencarleton.com>
To: "Constantine A. Murenin" <mureninc@gmail.com>, nanog@nanog.org
In-Reply-To: <CAPKkNb4nnos-h6gu=T1YBjguqgDjd0uLywh7zR8PLkBMDQ4SHQ@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On 12/23/2012 5:23 PM, Constantine A. Murenin wrote:
> On 23 December 2012 14:15, Ben Carleton <ben@bencarleton.com> wrote:
>> On 12/23/2012 12:31 AM, Ben Carleton wrote:
>>> Hi folks,
>>>
>>> I am seeing an IPv6-connected host on my network (which is on a HE.net
>>> tunnel) apparently being portscanned by an HE server at 2001:470:0:64::2 for
>>> about the last hour or so. It is trying to hit several different ports four
>>> times each before moving on and eventually repeating itself.
>>>
>>> If anyone from HE can shed some light on what's going on here it would be
>>> greatly appreciated, I can provide the IP of the host in question off-list
>>> if needed.
>>>
>>> Thanks,
>>> -- Ben
>>>
>> Thank you to everyone who responded on and off-list, we've got this
>> resolved.
> Don't worry, we don't care for what the resolution is; no need to post
> it to the list, either, the next person can just re-post this question
> anyways!
>
> Thank you for wasting everyone's time!
>
> C.
I actually have no idea what the resolution was. All I know is that when
I checked again a few hours later, the traffic had stopped, which, to be
honest, is good enough for me.
-- Ben
