[nsp-sec] IPv6 bad actors ??

[Leo Bicknell]

In a message written on Tue, Mar 13, 2012 at 03:14:10PM +0000, John Brown wrote:
> With IPv6 become more prevalent, what sort of IPv6 attack vectors are people seeing??
> I see lists of IPv4 stuff, but hardly ever see IPv6 address space show up.
> I've got to believe that bad actors are actively probing v6 networks and devices.

We have seen DNS reflection (amplification) attacks with IPv6 sources
against an IPv6 destination.  Both times we've seen this it was on a
dual-stacked victim so they were hitting both sides, but IPv6 was < 1%
of the total volume.

At least one botnet has the ability to do an IPv6 attack. :)

-- 
Leo Bicknell; E-mail: bicknell at isc.org, Phone: +1 650 423 1358
INOC*DBA *3357*592; Internet Systems Consortium, Inc.  www.isc.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20120313/cc4a2cfc/attachment-0001.sig>