[159141] in North American Network Operators' Group
Re: Hurricane Electric Tunnelbroker staff?
daemon@ATHENA.MIT.EDU (Warren Bailey)
Sun Dec 23 18:32:51 2012
From: Warren Bailey <wbailey@satelliteintelligencegroup.com>
To: "baconzombie@gmail.com" <baconzombie@gmail.com>
Date: Sun, 23 Dec 2012 23:32:31 +0000
In-Reply-To: <CAPz7E51i4eMS3bNujWsr2jWp-EHm=Ccj2_VsdqT2N+m8n365BQ@mail.gmail.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Reply-To: Warren Bailey <wbailey@satelliteintelligencegroup.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Be aware.. There have been reports of bacon zombies port scanning lately.
From my Galaxy Note II, please excuse any mistakes.
-------- Original message --------
From: Bacon Zombie <baconzombie@gmail.com>
Date: 12/23/2012 3:20 PM (GMT-07:00)
To:
Cc: nanog@nanog.org
Subject: Re: Hurricane Electric Tunnelbroker staff?
Can I ask why you count a port scan at something bad?
Or is it just the length of time it has been running for and it re-running
the same scan repetitively?
=C4=EA=EA=EA=EA=EA=E7=E7=E7=E7=E7=EA=EA=EA=EA=EA=E7=E7=E7=E7 =CE=E9=E9=E9=
=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=E9=
=E9
=C6=E9=E9=E9=E9=E9=E7=E7=E7=E7=E7=E9=E9=E9=E9=E9=E7=E7=E7=E7=E7=E9=E9=E9=E9=
=E9=E9=E9=E9=E7
On 23 December 2012 05:31, Ben Carleton <ben@bencarleton.com> wrote:
> Hi folks,
>
> I am seeing an IPv6-connected host on my network (which is on a HE.net
> tunnel) apparently being portscanned by an HE server at 2001:470:0:64::2
> for about the last hour or so. It is trying to hit several different port=
s
> four times each before moving on and eventually repeating itself.
>
> If anyone from HE can shed some light on what's going on here it would be
> greatly appreciated, I can provide the IP of the host in question off-lis=
t
> if needed.
>
> Thanks,
> -- Ben
>
>
--
BaconZombie
LOAD "*",8,1
