On March 7th, for the first time, some of the email notifications from lfd started showing up with no IP address. In place of the IP, they have this:
Time: Fri Mar 7 15:15:53 2014 -0800
IP: fe80:0000:0000:0000:0230:48ff:febc:7f1e (-/-/-)
Hits: 11
Blocked: Temporary Block
I'm letting you know this because it appears that someone has found a way around the port blocking (since there's no IP to block). The string of digits changes - there have been six or so variations in it -- but the one above has been used several times.
Have you seen this before? I'm getting two or three of these per day, and I never get a "permanent block" notification.
Many thanks for your wonderful work,
murph555
Port scanning email contains no IP
-
- Moderator
- Posts: 1524
- Joined: 01 Oct 2008, 09:24
Re: Port scanning email contains no IP
That is an IPv6 address.
Re: Port scanning email contains no IP
Sorry, I feel really stupid. This is the first one I've seen. Thanks so much for the reply.