Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Author Topic: Traffic from an unregistered address pool?  (Read 2972 times)

3PS

  • Newbie
  • *
  • Posts: 2
Traffic from an unregistered address pool?
« on: March 13, 2013, 10:17:56 AM »

My firewall is blocking a large number of polls from the Russian Federation against my workstation on port 15032 (TeamViewer listens on that port).  In researching the source addresses of the polls I found one address that comes up a total unknown and I was wondering if anyone knows who the prefix is assigned to.  The address is:

2a01:e35:2f02:9510:71a8:ebbd:22f0:c6fc

Cheers!

Pedro
Logged

snarked

  • Hero Member
  • *****
  • Posts: 765
Re: Traffic from an unregistered address pool?
« Reply #1 on: March 13, 2013, 10:39:06 AM »

The information is available via a "whois" lookup - and indicates France, not Russia.
Logged

broquea

  • Sr. Network Engineer, HE.NET AS6939
  • Administrator
  • Hero Member
  • *****
  • Posts: 1722
Re: Traffic from an unregistered address pool?
« Reply #2 on: March 13, 2013, 10:48:15 AM »

Logged

3PS

  • Newbie
  • *
  • Posts: 2
Re: Traffic from an unregistered address pool?
« Reply #3 on: March 15, 2013, 09:09:29 AM »

Thank you both.  I was using a different lookup method.

This address is the one I was not able to resolve, the others were from the Russian Federation.  As it turns out I traced the source of the polls on the inside and found that tixati was running in the background on the workstation in question.  Apparently it was setup to use both IPV4 & IPV6.
Logged

rchandra

  • Newbie
  • *
  • Posts: 12
Re: Traffic from an unregistered address pool?
« Reply #4 on: March 16, 2013, 02:58:12 PM »

Sometimes it's knowing about the right tool.  If all you've ever used is a pliers to pound in a nail, then someone shows you a hammer, you might say "huzzah!"  http://bgp.he.net/ip/ is one of those tools I never knew about before.  Thank you.
Logged