constant IPv6 pinging

Daniel Roesen dr at cluenet.de
Fri Mar 1 21:12:16 CET 2013


On Fri, Mar 01, 2013 at 10:37:36AM -0800, Matthew Luckie wrote:
> Starting at Saturday noon PST (last weekend) something began constantly
> pinging my HE tunnel:
> 
> http://www.caida.org/~mjl/gif0-week.png
> http://www.caida.org/~mjl/gif0-ping.pcap
> 
> Does anyone have insight into who they are and what they are doing?

Looks like Akamai to me. Several of the IPs directly tracable to Akamai,
and all using IPv4 address encoded in hex as their host part, which I
seem to remember being an Akamai practice.

Are you running any web server with content on that IPv6 address?

Best regards,
Daniel

-- 
CLUE-RIPE -- Jabber: dr at cluenet.de -- dr at IRCnet -- PGP: 0xA85C8AA0


More information about the ipv6-ops mailing list