4 ms·
Presumably for the larger address space that is more resistant to scans.
by IncRnd 6y ago
Presumably for the larger address space that is more resistant to scans.
- SilverRed 6y agoIts interesting that you can and people have scanned the entire ipv4 space in minutes on a fast VPS but it would take you forever to find your first ipv6 address that is even in use.
- lytfyre 6y agoShodan - a search tool for such things - had a pretty incredible approach to attacking this - they quietly provided most of the ipv6 hosts to pool.ntp.org, which is widely used as a linux default - and would queue a portscan up for any device that connected at startup for timesync. https://arstechnica.com/information-technology/2016/02/using-ipv6-with-linux-youve-likely-been-visited-by-shodan-and-other-scanners/ https://arstechnica.com/information-technology/2016/02/using...
- bombcar 6y agoIngenious - and all the more reason to run NTP on the border router/firewall and have that be the only device that communicates with the outside world.
- totony 6y agobut if this is applied >Isolate the network they are on behind a Linux box that cannot route. then it doesn't matter the address space size