[6bone] Nothing is sacred...

Jeroen Massar jeroen@unfix.org
Wed, 13 Aug 2003 19:36:11 +0200


-----BEGIN PGP SIGNED MESSAGE-----

Alec Waters wrote:

> Ben Winslow wrote:
> > I fixed IPv6 SMTP yesterday, only to discover the wonderful 
> droppings of
> > a spammer with the audacity to operate over IPv6!
> 
> More IPv6 blackhat activity here:
> 
> http://project.honeynet.org/scans/scan28/
>
> The writeups are very interesting.

And not very strange as italians are already doing much
damage in the IPv4 world and they have also been noted
for trying to do so in the IPv6 world for some time now.

I quote:
8<------------
The attacker uses 2001:6b8:0:400::5d0e as IPv6 address. This address is part of 2001:6b8::/48, which is assigned to Telecom Italia for the 'ngnet initiative'. 
- --------------->8

Fortunatly they learned from it:
8<-----------------
This service is avaiable only accessing using IP addresses assigned to the Telecom Italia group. if you are using one of these addresses and you read this message please send an email containing your IP address to tbadmin@ngnet.it
- -------------------->8

No more abusing italians through there at least.
Which did explain why we saw a jump in italian requests at SixXS,
of which most had dubieus addresses and mostly one intention: irc.
And thus where nicely declined on those grounds.

Greets,
 Jeroen

-----BEGIN PGP SIGNATURE-----
Version: Unfix PGP for Outlook Alpha 13 Int.
Comment: Jeroen Massar / jeroen@unfix.org / http://unfix.org/~jeroen/

iQA/AwUBPzp3CimqKFIzPnwjEQJWdQCeLV0C7Ua1W8sTDKKvHWxbjEJWsOAAnjPZ
SpqJWDnoa7ualUuzuWjCBpse
=u1i9
-----END PGP SIGNATURE-----