<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello Jordi, Malick</p>
<p> Jordi, thanks for forwarding this message. Hope my response
goes thru since I'm also subscribe to afripv6.</p>
<p>Malick,</p>
<p> As Jordi said we are working in a very similar study (actually
probably identical), in this moment I'm happy to tell you we have
everything up & running.</p>
<p> The take away of Jordi's message and our message in general is
that you need to take a different approach, you can not just scan
the full IPv6 address space; you mentioned nmap however AFAIK nmap
does not allow IPv6 host scanning. As an additional comment many
years ago, just for fun (I was leaning multi threading) I wrote a
very short python3 script for host scanning IPv6 networks [1]: <a
href="https://blog.acostasite.com/2014/12/python-script-probably-useless-but.html">https://blog.acostasite.com/2014/12/python-script-probably-useless-but.html</a></p>
<p> The key part for your project is to identify the recursive
resolvers, you have many ways of doing this, example: you could
use the logs of a DNS authoritative server for a zone.</p>
<p> Here you will find more information (in English):</p>
<p><a
href="https://prensa.lacnic.net/news/en/research/new-lacnic-research-initiative-identifies-open-dns-servers-in-the-region">https://prensa.lacnic.net/news/en/research/new-lacnic-research-initiative-identifies-open-dns-servers-in-the-region</a></p>
<p><a
href="https://prensa.lacnic.net/news/en/ipv6-en/lacnic-launches-new-service-for-detecting-open-dns-servers-with-ipv6-in-the-region">https://prensa.lacnic.net/news/en/ipv6-en/lacnic-launches-new-service-for-detecting-open-dns-servers-with-ipv6-in-the-region</a></p>
<p>Our public tester:</p>
<p><a href="https://warp.lacnic.net/dns-open-resolvers-con-ipv6">https://warp.lacnic.net/dns-open-resolvers-con-ipv6</a></p>
<p><br>
</p>
<p> We are publishing some results (worldwide, not only LACNIC
region):</p>
<p><a href="https://stats.labs.lacnic.net/IPv6/DNSOpenResolver/">https://stats.labs.lacnic.net/IPv6/DNSOpenResolver/</a></p>
<p><br>
</p>
<p> Hope the above helps.</p>
<p><br>
</p>
<p>Alejandro,</p>
<p>[1] <a
href="https://github.com/alejandroacostaalamo/Python3-ipv6hostscanner">https://github.com/alejandroacostaalamo/Python3-ipv6hostscanner</a></p>
<p><br>
</p>
<div class="moz-cite-prefix">On 11/3/19 9:33 AM, JORDI PALET
MARTINEZ wrote:<br>
</div>
<blockquote type="cite"
cite="mid:C7FD2EAD-AB96-447E-97AC-835102EF1FDA@consulintel.es">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Times New Roman \(Cuerpo en alfa";
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EstiloCorreo18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US">I can point to the authors of a similar study
in LACNIC (in copy).<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><a
href="https://labs.lacnic.net/Identificando-servidores-DNS-IPv6-Open-Resolvers/"
moz-do-not-send="true"><span lang="EN-US">https://labs.lacnic.net/Identificando-servidores-DNS-IPv6-Open-Resolvers/</span></a><span
lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US">The article mentions as well a similar study in
RIPE. Sorry is Spanish!<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US">I think the point is to go from the “reverse
root server” administered by Afrinic, so you don’t need to
do a complete scanning, which will be near to impossible …<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US">This was also presented in the LACNIC31: </span><a
href="https://www.lacnic.net/3636/50/evento/agenda-lacnic-31#thursday-ftl"
moz-do-not-send="true"><span lang="EN-US">https://www.lacnic.net/3636/50/evento/agenda-lacnic-31#thursday-ftl</span></a><span
lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US">Look for the slides and video:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333;border:none
windowtext 1.0pt;padding:0cm;background:#F1F1F1">Identifying
Open Resolvers in IPv6</span></b><span
style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#666666"><br>
<span style="background:#F1F1F1">Alejandro Acosta, Darío
Gómez</span></span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US">I’m sure they will be able to help!<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:black" lang="EN-US">Regards,<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:12.0pt;color:black;mso-fareast-language:EN-US"
lang="EN-US">Jordi<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:12.0pt;color:black;mso-fareast-language:EN-US"
lang="EN-US">@jordipalet<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:12.0pt;color:black;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"
lang="EN-US"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">El 3/11/19
16:21, "Malick K. ALASSANE" <<a
href="mailto:alkomalick@gmail.com"
moz-do-not-send="true">alkomalick@gmail.com</a>>
escribió:<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">My objective
for this study is to detect open DNS resolvers in the
AFRINIC IP space. <o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">Le dim. 3
nov. 2019, à 16 h 05, JORDI PALET MARTINEZ via
AfrIPv6-Discuss <<a
href="mailto:afripv6-discuss@afrinic.net"
moz-do-not-send="true">afripv6-discuss@afrinic.net</a>>
a écrit :<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC
1.0pt;padding:0cm 0cm 0cm
6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US">Hi Malick,</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US">That’s
somehow, one of the “advantages” of IPv6, that make
it much more difficult.</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US">If the
operators and end-users are doing a good work, they
will not be assigning neither contiguous prefixes,
neither contiguous prefixes/LANs, neither contiguous
hosts!</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US">May be if you
explain a bit more what you’re trying to achieve, we
can give some ideas.</span><o:p></o:p></p>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt;color:black" lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt;color:black" lang="EN-US">Regards,</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;margin-bottom:12.0pt;margin-left:35.4pt"><span
style="font-size:12.0pt;color:black" lang="EN-US">Jordi</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;margin-bottom:12.0pt;margin-left:35.4pt"><span
style="font-size:12.0pt;color:black" lang="EN-US">@jordipalet</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;margin-bottom:12.0pt;margin-left:35.4pt"><span
style="font-size:12.0pt;color:black" lang="EN-US"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:35.4pt"><span
style="font-size:12.0pt" lang="EN-US"> </span><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:70.8pt">El
3/11/19 15:57, "Malick K. ALASSANE" <<a
href="mailto:alkomalick@gmail.com"
target="_blank" moz-do-not-send="true">alkomalick@gmail.com</a>>
escribió:<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:70.8pt"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:70.8pt">Good
morning, everyone!<br>
I'm doing a study on afrinic's IP address blocks. I
didn't have any constraints with ipv4 address
blocks. The use of the zmap tool allowed me to do a
quick scan on all available IPV4 addresses.
Unfortunately, i don't know how to scan IPV6 blocks
without taking a long time. Nmap, can help me, but
it could take several years to finish. Zmap or
Masscan don't support ipv6. <o:p></o:p></p>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:70.8pt">I
would like to know if anyone has a solution to
quickly scan ipv6 address blocks to identify ipv6
servers that offer a service.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:70.8pt"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:70.8pt">Thanks
for your help!<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:70.8pt">_______________________________________________
AfrIPv6-Discuss mailing list <a
href="mailto:AfrIPv6-Discuss@afrinic.net"
target="_blank" moz-do-not-send="true">AfrIPv6-Discuss@afrinic.net</a>
<a
href="https://lists.afrinic.net/mailman/listinfo/afripv6-discuss"
target="_blank" moz-do-not-send="true">https://lists.afrinic.net/mailman/listinfo/afripv6-discuss</a>
<o:p></o:p></p>
</div>
<p class="MsoNormal"
style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:35.4pt"><br>
**********************************************<br>
IPv4 is over<br>
Are you ready for the new Internet ?<br>
<a href="http://www.theipv6company.com" target="_blank"
moz-do-not-send="true">http://www.theipv6company.com</a><br>
The IPv6 Company<br>
<br>
This electronic message contains information which may
be privileged or confidential. The information is
intended to be for the exclusive use of the
individual(s) named above and further non-explicilty
authorized disclosure, copying, distribution or use of
the contents of this information, even if partially,
including attached files, is strictly prohibited and
will be considered a criminal offense. If you are not
the intended recipient be aware that any disclosure,
copying, distribution or use of the contents of this
information, even if partially, including attached
files, is strictly prohibited, will be considered a
criminal offense, so you must reply to the original
sender to inform about this communication and delete it.<o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-left:35.4pt">_______________________________________________<br>
AfrIPv6-Discuss mailing list<br>
<a href="mailto:AfrIPv6-Discuss@afrinic.net"
target="_blank" moz-do-not-send="true">AfrIPv6-Discuss@afrinic.net</a><br>
<a
href="https://lists.afrinic.net/mailman/listinfo/afripv6-discuss"
target="_blank" moz-do-not-send="true">https://lists.afrinic.net/mailman/listinfo/afripv6-discuss</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal" style="margin-left:35.4pt">_______________________________________________
AfrIPv6-Discuss mailing list <a class="moz-txt-link-abbreviated" href="mailto:AfrIPv6-Discuss@afrinic.net">AfrIPv6-Discuss@afrinic.net</a>
<a class="moz-txt-link-freetext" href="https://lists.afrinic.net/mailman/listinfo/afripv6-discuss">https://lists.afrinic.net/mailman/listinfo/afripv6-discuss</a> <o:p></o:p></p>
</div>
<br>
**********************************************<br>
IPv4 is over<br>
Are you ready for the new Internet ?<br>
<a class="moz-txt-link-freetext" href="http://www.theipv6company.com">http://www.theipv6company.com</a><br>
The IPv6 Company<br>
<br>
This electronic message contains information which may be
privileged or confidential. The information is intended to be for
the exclusive use of the individual(s) named above and further
non-explicilty authorized disclosure, copying, distribution or use
of the contents of this information, even if partially, including
attached files, is strictly prohibited and will be considered a
criminal offense. If you are not the intended recipient be aware
that any disclosure, copying, distribution or use of the contents
of this information, even if partially, including attached files,
is strictly prohibited, will be considered a criminal offense, so
you must reply to the original sender to inform about this
communication and delete it.<br>
<br>
</blockquote>
</body>
</html>