Unveiling IPv6 Scanning Dynamics: A Longitudinal Study Using Large Scale Proactive and Passive IPv6 Telescopes
We introduce new tools and vantage points to develop and integrate proactive techniques to attract IPv6 scan traffic, thus enabling its analysis. By deploying the largest-ever IPv6 proactive telescope in a production ISP network, we collected over 600M packets of unsolicited traffic from 1.9k Autonomous Systems in 10 months. We characterized the sources of unsolicited traffic, evaluated the effectiveness of five major features across the network stack, and inferred scanners' sources of target addresses and their strategies.
Authors
- P. W. Richter
- Arthur Berger (ORCID: https://orcid.org/0000-0003-0387-4734)
- Oliver Gasser (ORCID: https://orcid.org/0000-0002-3425-9331)
- Hammas Bin Tanveer (ORCID: https://orcid.org/0009-0006-1724-8696)
- John Ronan (ORCID: https://orcid.org/0000-0002-0183-2517)
- kc claffy (ORCID: https://orcid.org/0000-0003-4824-3493)
- Ricky K. P. Mok (ORCID: https://orcid.org/0000-0003-3300-9514)
- Echo Chan
- Sebastian Kappes
Institutions
- Akamai (United States) (US)
- University of Iowa (US)
- Hong Kong Polytechnic University (HK)
- University of California San Diego (US)
- Max Planck Institute for Informatics (DE)
- Seattle University (US)
- Waterford Institute of Technology (IE)
Publication Details
- Journal
- Proceedings of the ACM on Networking
- Published
- 2025-09-03
- DOI
- https://doi.org/10.1145/3749221
- Citations
- 2
- Primary Topic
- Software-Defined Networks and 5G
- Type
- article
- Field-Weighted Citation Impact
- 2.97
Funders
- National Science Foundation