[6bone] IPv6 spam

[Marco d'Itri]

[HE.NET tech-c Cc:ed in the hope they can explain this.

My formmail.pl honeypot just received a posting attempt[1] from a he.net
IPv6 address:

3ffe:81d0:ffff::3 - - [11/Sep/2002:11:16:05 +0200] "POST /cgi-bin/formmail.pl HTTP/1.0" 200 1394 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; AIRF; .NET CLR 1.0.3705)"

ipv6.he.net             AAAA    3FFE:81D0:FFFF:0:0:0:0:3


Has anybody else seen similar things happening over IPv6 yet?

[1] Not a probe or the result of something legitimate, the POST payload
was part of a spam run for a gay porn site which is being sent from many
IPv4 open proxies.
-- 
ciao,
Marco