Port scanning email contains no IP
Posted: 17 Mar 2014, 22:13
On March 7th, for the first time, some of the email notifications from lfd started showing up with no IP address. In place of the IP, they have this:
Time: Fri Mar 7 15:15:53 2014 -0800
IP: fe80:0000:0000:0000:0230:48ff:febc:7f1e (-/-/-)
Hits: 11
Blocked: Temporary Block
I'm letting you know this because it appears that someone has found a way around the port blocking (since there's no IP to block). The string of digits changes - there have been six or so variations in it -- but the one above has been used several times.
Have you seen this before? I'm getting two or three of these per day, and I never get a "permanent block" notification.
Many thanks for your wonderful work,
murph555
Time: Fri Mar 7 15:15:53 2014 -0800
IP: fe80:0000:0000:0000:0230:48ff:febc:7f1e (-/-/-)
Hits: 11
Blocked: Temporary Block
I'm letting you know this because it appears that someone has found a way around the port blocking (since there's no IP to block). The string of digits changes - there have been six or so variations in it -- but the one above has been used several times.
Have you seen this before? I'm getting two or three of these per day, and I never get a "permanent block" notification.
Many thanks for your wonderful work,
murph555