14 Nov
2005
14 Nov
'05
7:46 p.m.
Hi, NANOGers. Efficient or not, we do see scanning activity on IPv6. We've seen IPv6 botnets, compromised hosts on IPv6 used as IRC bounces, and even one EU-based warez crew that enabled IPv6 tunnels on the hosts they compromised. They used the IPv6 tunnels as their management plane. While IPv6 obviously presents a huge address space, the miscreants don't have to scan all of it, or compromise much more than a few devices on it, to reap a reward. Just enough is good enough. I'll take a pina colada anyway. :) Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty);