Unveiling IPv6 Scanning Dynamics: A Longitudinal Study Using Large Scale Proactive and Passive IPv6 Telescopes
By: Hammas Bin Tanveer , Wai Sun Chan , Ricky K. P. Mok and more
Potential Business Impact:
Finds internet scanners by watching for them.
We introduce new tools and vantage points to develop and integrate proactive techniques to attract IPv6 scan traffic, thus enabling its analysis. By deploying the largest-ever IPv6 proactive telescope in a production ISP network, we collected over 600M packets of unsolicited traffic from 1.9k Autonomous Systems in 10 months. We characterized the sources of unsolicited traffic, evaluated the effectiveness of five major features across the network stack, and inferred scanners' sources of target addresses and their strategies.
Similar Papers
Scanning the IPv6 Internet Using Subnet-Router Anycast Probing
Networking and Internet Architecture
Finds more internet addresses faster and safer.
Merit Network Telescope: Processing and Initial Insights from Nearly 20 Years of Darknet Traffic for Cybersecurity Research
Social and Information Networks
Finds internet attacks by watching network traffic.
Grey Rhino Warning: IPv6 is Becoming Fertile Ground for Reflection Amplification Attacks
Networking and Internet Architecture
Finds internet weaknesses for powerful attacks.