Help Required IPV6 address

[Terryl]

OK any IPV6 guys out there that can help out an old IPV4 guy?

I have a customer that is being slammed by a hacker, the Avast premium software is doing it's job blocking the attempts of the hacker to try and get a remote desktop connection, this is fine but I have tried to look up the IPV6 address to see where it may be coming from with out much luck, I am an old IPV4 guy, I know nothing about how to look up an IPV6 address, and all attempts by me (using google) to trace/track it down show nothing for that address.

I don't know if it's alright to post the address here or should I post it via PM to anyone interested.

Terryl

 

[Topper]

OK any IPV6 guys out there that can help out an old IPV4 guy?

I have a customer that is being slammed by a hacker, the Avast premium software is doing it's job blocking the attempts of the hacker to try and get a remote desktop connection, this is fine but I have tried to look up the IPV6 address to see where it may be coming from with out much luck, I am an old IPV4 guy, I know nothing about how to look up an IPV6 address, and all attempts by me (using google) to trace/track it down show nothing for that address.

I don't know if it's alright to post the address here or should I post it via PM to anyone interested.

Terryl

This is an issue that I am fully aware of, I wish someone would create an IPV6 blocker and indeed I have asked a firewall manufacturer for just that, PM me the address I will see what I can find out, however many people (including myself) use a VPN with randomized addresses which makes it almost impossible to discover the source

 

[Analoguesat]

Its probably coming off a a bot on a compromised server or system somewhere. Have you tried "ipv6 tracker" in google - that brings up sites that claim to be able to locate a v6 address.

 

[Terryl]

Yup, been there done that, all that comes up is an invalid IP address, I'm checking with my router manufacture to see if I can block an IPV6 address.

 

[Topper]

Well I too have drawn a blank it is not a valid IPV6 address which as AS mentioned suggests the attack is bot driven

 

[Terryl]

Well I may have to ask Avast if they might know of something, it's software is blocking all attempts by that IP addy, 7602 tries so far.

 

[Topper]

Well I may have to ask Avast if they might know of something, it's software is blocking all attempts by that IP addy, 7602 tries so far.

Have you been upsetting someone or are you very vocal (in other forums) about your politics?

 

[Topper]

Actually I have just realized that in your PM to me you stated that the address began with FE80: this indicates it is a link local address, i.e. someone who is part of your network or ISPs network.
Typically, link-local IPv6 addresses have “FE80” as the hexadecimal representation of the first 10 bits of the 128-bit IPv6 address, then the least-significant 64-bits of the address are the Interface Identifier (IID). It may be worth a chat with your ISP

 

[Terryl]

Its not a simple fe80: but a fe80::, a double colon, as far as aht I have read on line this is not part of the actual IPV6 address, only what follows after it. And thats all I know about that.