Strange IPv6 scans from big networks

--===============2026238562==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="IJpNTDwzlM2Ie8A6"
Content-Disposition: inline


--IJpNTDwzlM2Ie8A6
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

Currently I see day long IPv6 scans from networks of Akamai
(2a02:26f0:f3::/48), Google (2a00:1450:4000::/37), Apple
(2a01:110::/31), Microsoft (2a01:b740::/29), Swisscom (2001:918::/32)
and Init7 (2001:1620::/32) to my Network @HOME. They all try to
enumerate hosts and ports in 2a02:168:4e82:0:* that does not and never
have exists.

The net is a fiber7 port.

Anybody an idea what is going on here? On request I can provide more
informations like pcaps.

The scans are sourced from all over that mentioned networks above.

While I have no scruples to block Apple, Microsoft, Akamai or other bad
behaving networks, I do not want to block Swisscom or Init7 if not
needed.

Needless to say that I do not have any public service behind my fiber7
port.

Gru=DF
   Klaus
--=20
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email protected]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C

--IJpNTDwzlM2Ie8A6
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Charset: ISO-8859-1
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=l0Qx
-----END PGP SIGNATURE-----

--IJpNTDwzlM2Ie8A6--


--===============2026238562==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


_______________________________________________
swinog mailing list
[email protected]
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

--===============2026238562==--