3 ms·

I tried the online scan that you linked with my IPv6 address. At the end it said Nmap done: 0 IP addresses (0 hosts up) scanned in 2.20 seconds Even though i

I tried the online scan that you linked with my IPv6 address. At the end it said Nmap done: 0 IP addresses (0 hosts up) scanned in 2.20 seconds Even though it claims to support IPv6 Also the site spent a whole lot of time showing progress bars and stuff. Whereas when I run Nmap from one of my servers on the internet against my public home IPv6 address % nmap -6 -A -T4 2a0c:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx I get: Starting Nmap 7.94 ( https://nmap.org ) at 2023-07-16 17:43 CEST Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn Nmap done: 1 IP address (0 hosts up) scanned in 2.23 seconds So in conclusion yeah, that site you linked was not able to scan IPv6 I think better than that online version of Nmap is to run Nmap from another computer on another IPv6 enabled network against your own public home IPv6 address. Assuming you have additional computers like a server or a VPS, etc. Same way I did. Another possible alternative is to use shodan.io and check what they have found in their past scans for your IP address. Seems that shodan requires creating an account now in order to use it. Not sure if it did before. I remember testing shodan.io a few years ago but don’t remember if I had to create an account then.

mr_mitm 3y ago
It might just be that your host is blocking all IPv6 probes, as nmap reports, in which case your host would already be in your desired configuration. Also I'd be extremely surprised if Shodan had anything on your IPv6 address.
- codetrotter 3y ago
  Notice the difference of their output: Nmap done: 0 IP addresses (0 hosts up) scanned in 2.20 seconds And mine: Nmap done: 1 IP address (0 hosts up) scanned in 2.23 seconds And note that 0 IP addresses scanned is exactly what you get if you run nmap with an IPv6 address as target but without the -6 flag. They probably are doing just that; running nmap without the -6 flag. But let's try something else. % host google.com google.com has address 142.250.184.14 google.com has IPv6 address 2a00:1450:4003:808::200e google.com mail is handled by 10 smtp.google.com. % nmap -6 -A -T4 2a00:1450:4003:808::200e Starting Nmap 7.80 ( https://nmap.org ) at 2023-07-16 16:53 BST Nmap scan report for mad06s10-in-x0e.1e100.net (2a00:1450:4003:808::200e) Host is up (0.032s latency). Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http gws [...] Nmap done: 1 IP address (1 host up) scanned in 76.10 seconds And now try putting 2a00:1450:4003:808::200e into their web tool and see what they report. At the moment their website will get 0 addresses scanned for that as well. Nmap done: 0 IP addresses (0 hosts up) scanned in 1.58 seconds
mulmen 3y ago
The site is actually spinning up a VM to run the nmap so those progress bars are real. Thanks for checking. I reached out to the creator and he will update it to work with IPv6. Agree nmap from another machine is best but that's not always an option. I'm thinking like if I am on hotel wifi or something. I might not have easy access to another box. Shodan is a great suggestion.

mr_mitm 3y ago

It might just be that your host is blocking all IPv6 probes, as nmap reports, in which case your host would already be in your desired configuration. Also I'd be extremely surprised if Shodan had anything on your IPv6 address.

codetrotter 3y ago
Notice the difference of their output: Nmap done: 0 IP addresses (0 hosts up) scanned in 2.20 seconds And mine: Nmap done: 1 IP address (0 hosts up) scanned in 2.23 seconds And note that 0 IP addresses scanned is exactly what you get if you run nmap with an IPv6 address as target but without the -6 flag. They probably are doing just that; running nmap without the -6 flag. But let's try something else. % host google.com google.com has address 142.250.184.14 google.com has IPv6 address 2a00:1450:4003:808::200e google.com mail is handled by 10 smtp.google.com. % nmap -6 -A -T4 2a00:1450:4003:808::200e Starting Nmap 7.80 ( https://nmap.org ) at 2023-07-16 16:53 BST Nmap scan report for mad06s10-in-x0e.1e100.net (2a00:1450:4003:808::200e) Host is up (0.032s latency). Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http gws [...] Nmap done: 1 IP address (1 host up) scanned in 76.10 seconds And now try putting 2a00:1450:4003:808::200e into their web tool and see what they report. At the moment their website will get 0 addresses scanned for that as well. Nmap done: 0 IP addresses (0 hosts up) scanned in 1.58 seconds

mulmen 3y ago

The site is actually spinning up a VM to run the nmap so those progress bars are real. Thanks for checking. I reached out to the creator and he will update it to work with IPv6. Agree nmap from another machine is best but that's not always an option. I'm thinking like if I am on hotel wifi or something. I might not have easy access to another box. Shodan is a great suggestion.