{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T01:37:46Z","timestamp":1760060266558,"version":"build-2065373602"},"reference-count":59,"publisher":"MDPI AG","issue":"9","license":[{"start":{"date-parts":[[2025,8,25]],"date-time":"2025-08-25T00:00:00Z","timestamp":1756080000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Joint Fund Key Program of National Natural Science Foundation of China","award":["U22B2026","BG2024042","2022YFB3104002","BE2022081"],"award-info":[{"award-number":["U22B2026","BG2024042","2022YFB3104002","BE2022081"]}]},{"name":"Special Fund for Key Program of Science and Technology of Jiangsu Province","award":["U22B2026","BG2024042","2022YFB3104002","BE2022081"],"award-info":[{"award-number":["U22B2026","BG2024042","2022YFB3104002","BE2022081"]}]},{"name":"National Key Research and Development Program of China","award":["U22B2026","BG2024042","2022YFB3104002","BE2022081"],"award-info":[{"award-number":["U22B2026","BG2024042","2022YFB3104002","BE2022081"]}]},{"name":"National Key Research and Development Program of Jiangsu Province","award":["U22B2026","BG2024042","2022YFB3104002","BE2022081"],"award-info":[{"award-number":["U22B2026","BG2024042","2022YFB3104002","BE2022081"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>Due to the huge network address space of IPv6, the overhead of IPv6 space detection is very large. Thus, how to improve the detection efficiency is a hot research topic. Firstly, the basic process of IPv6 network space detection is illustrated, and then the detection algorithms are categorized into two primary categories: optimization scanning-based detection algorithms and address generation-based detection algorithms. According to the timelines proposed by the algorithms, the ideas of these algorithms are discussed separately. Finally, a comprehensive comparison and analysis of these detection algorithms are conducted from multiple dimensions. Future research directions are discussed, including: collection of active IPv6 addresses and allocation patterns, discovery of IPv6 address detection patterns based on machine learning, improvement of the detection response rate, and moral issues caused by network detection.<\/jats:p>","DOI":"10.3390\/info16090727","type":"journal-article","created":{"date-parts":[[2025,8,26]],"date-time":"2025-08-26T06:26:31Z","timestamp":1756189591000},"page":"727","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Survey of IPv6 Address Scanning Technologies"],"prefix":"10.3390","volume":"16","author":[{"given":"Yang","family":"Ma","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7202-4939","authenticated-orcid":false,"given":"Liquan","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhanfeng","family":"Wang","sequence":"additional","affiliation":[{"name":"Nanjing Lexbell Information Technology Co., Ltd., Nanjing 210007, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2025,8,25]]},"reference":[{"key":"ref_1","unstructured":"(2025, May 26). Statista. Available online: https:\/\/www.statista.com\/statistics\/1183457\/iot-connected-devices-worldwide\/."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Ngo, T., Yin, J., Ge, Y.-F., and Wang, H. (2025). Optimizing IoT Intrusion Detection\u2014A Graph Neural Network Approach with Attribute-Based Graph Construction. Information, 16.","DOI":"10.3390\/info16060499"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Alshehri, S.M., Sharaf, S.A., and Molla, R.A. (2025). Systematic Review of Graph Neural Network for Malicious Attack Detection. Information, 16.","DOI":"10.3390\/info16060470"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Jain, V.K., Aggrawal, J., Dangi, R., Prasad Shukla, S.S., Yadav, A.K., and Choudhary, G. (2025). Unmasking the True Identity: Unveiling the Secrets of Virtual Private Networks and Proxies. Information, 16.","DOI":"10.3390\/info16020126"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Li, K.-H., and Wong, K.-Y. (2021). Empirical Analysis of IPv4 and IPv6 Networks through Dual-Stack Sites. Information, 12.","DOI":"10.3390\/info12060246"},{"key":"ref_6","unstructured":"(2025, July 21). The RIPE NCC Has Run Out of IPv4 Addresses. Available online: https:\/\/www.ripe.net\/publications\/news\/about-ripe-ncc-and-ripe\/the-ripe-ncc-has-run-out-of-ipv4-addresses."},{"key":"ref_7","unstructured":"(2025, July 21). Chinese Government Website, Available online: http:\/\/www.gov.cn\/zhengce\/2017-11\/26\/content_5242389.htm."},{"key":"ref_8","unstructured":"(2025, July 21). 2018 ISOC Report on IPv6 Deployment. Available online: https:\/\/www.internetsociety.org\/wp-content\/uploads\/2018\/06\/2018-ISOC-Report-IPv6-Deployment.pdf."},{"key":"ref_9","unstructured":"(2025, July 21). The 55th Statistical Report on China\u2019s Internet Development. Available online: https:\/\/cnnic.cn\/n4\/2025\/0117\/c208-11228.html."},{"key":"ref_10","unstructured":"Ubiedo, L., O\u2019Hara, T., Erquiaga, M.J., and Garcia, S. (2021). Current state of IPv6 security in IoT. arXiv."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Hinden, R., and Deering, S. (2025, July 21). IP Version 6 Addressing Architecture, RFC1884, December 1995. Available online: https:\/\/www.rfc-editor.org\/rfc\/rfc1884.html.","DOI":"10.17487\/rfc1884"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Hinden, R., and Deering, S. (2025, July 21). IP Version 6 Addressing Architecture, RFC2373, July, 1998. Available online: https:\/\/www.rfc-editor.org\/rfc\/rfc2373.html.","DOI":"10.17487\/rfc2373"},{"key":"ref_13","unstructured":"Hinden, R., and Deering, S. (2025, July 21). IP Version 6 Addressing Architecture, RFC3513, April 2003. Available online: https:\/\/www.scirp.org\/reference\/referencespapers?referenceid=246286."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Hinden, R., and Deering, S. (2025, July 21). IP Version 6 Addressing Architecture, RFC3513, February 2006. Available online: https:\/\/www.rfc-editor.org\/rfc\/rfc4291.html.","DOI":"10.17487\/rfc4291"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Ehsan ul Haq, M., Raza Perwaz, M., and Ahmed, K. (2009, January 9\u201312). Compact and user-friendly representation of IPv6 addressing approach and masking. Proceedings of the 2009 International Conference for Internet Technology and Secured Transactions (ICITST), London, UK.","DOI":"10.1109\/ICITST.2009.5402594"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Foremski, P., Plonka, D., and Berger, A. (2016, January 27\u201329). Entropy\/IP: Uncovering Structure in IPv6 Addresses. Proceedings of the Internet Measurement Conference, ACM, Santa Monica, CA, USA.","DOI":"10.1145\/2987443.2987445"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Plonka, D., and Berger, A. (2015, January 28\u201330). Temporal and Spatial Classification of Active IPv6 Addresses. Proceedings of the Internet Measurement Conference, ACM, Tokyo, Japan.","DOI":"10.1145\/2815675.2815678"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Gont, F., and Chown, T. (2016). Network Reconnaissance in IPv6 Networks, Technical Report; Internet Engineering Task Force (IETF).","DOI":"10.17487\/RFC7707"},{"key":"ref_19","unstructured":"Malone, D. (2008, January 29\u201330). Observations of IPv6 addresses. Proceedings of the International Conference on Passive and Active Network Measurement, Cleveland, OH, USA."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Fan, X., and Heidemann, J. (2010, January 1\u20133). Selecting representative IP addresses for Internet topology studies. Proceedings of the Internet Measurement Conference, ACM, Melbourne, VIC, Australia.","DOI":"10.1145\/1879141.1879195"},{"key":"ref_21","first-page":"1496","article-title":"Cyber scanning: A comprehensive survey","volume":"16","author":"Debbabi","year":"2013","journal-title":"IEEE Commun. Surv. Tut"},{"key":"ref_22","unstructured":"Durumeric, Z., Wustrow, E., and Halderman, J.A. (2013, January 14\u201316). ZMap: Fast Internet-wide Scanning and Its Security Applications. Proceedings of the 22nd USENIX Conference on Security, Washington, DC, USA."},{"key":"ref_23","unstructured":"(2025, July 21). Masscan. Available online: https:\/\/github.com\/robertdavidgraham\/masscan\/."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Song, G., He, L., Wang, Z., Yang, J., Jin, T., Liu, J., and Li, G. (2020, January 15\u201317). Towards the Construction of Global IPv6 Hitlist and Efficient Probing of IPv6 Address Space. Proceedings of the IWQOS 2020: 28th International Teletraffic Congress (ITC 28), Hangzhou, China.","DOI":"10.1109\/IWQoS49365.2020.9212980"},{"key":"ref_25","first-page":"143","article-title":"A survey of IPv6 address scanning techniques","volume":"Volume 13564","author":"Cheng","year":"2025","journal-title":"Proceedings of the Second International Conference on Frontiers of Applied Optics and Computer Engineering (AOCE 2025)"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1109\/TNSM.2004.4623692","article-title":"IPv6-in-IPv4 tunnel discovery: Methods and experimental results","volume":"1","author":"Colitti","year":"2004","journal-title":"IEEE TNSM Trans. Netw. Serv. Manag."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"18187","DOI":"10.1109\/ACCESS.2017.2737524","article-title":"IPv6 neighbor discovery protocol specifications, threats and countermeasures: A survey","volume":"5","author":"Ahmed","year":"2017","journal-title":"IEEE Access"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Chown, T. (2008). IPv6 Implications for Network Scanning, Technical Report; Internet Engineering Task Force (IETF).","DOI":"10.17487\/rfc5157"},{"key":"ref_29","unstructured":"Li, J., Su, F., Lin, Z., and Yan, M. (2011, January 21\u201323). The research and analysis of worm scanning strategies in IPv6 network. Proceedings of the 2011 13th Asia-Pacific Network Operations and Management Symposium, Jeju, Korea."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"1514","DOI":"10.4028\/www.scientific.net\/AMR.268-270.1514","article-title":"Internet Worm Modeling and Analysis in IPv6 Networks","volume":"268","author":"Su","year":"2011","journal-title":"Adv. Mater. Res."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Zirngibl, J., Steger, L., Sattler, P., Gasser, O., and Carle, G. (2022, January 25\u201327). Rusty Clusters? Dusting an IPv6 Research Foundation. Proceedings of the 2022 Internet Measurement Conference, Nice, France.","DOI":"10.1145\/3517745.3561440"},{"key":"ref_32","unstructured":"(2025, July 21). Rapid7 IPv6 Discovery Press Release. Available online: https:\/\/www.rapid7.com\/about\/press-releases\/."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"tyae023","DOI":"10.1093\/cybsec\/tyae023","article-title":"A path forward: Improving Internet routing security by enabling zones of trust","volume":"10","author":"Clark","year":"2024","journal-title":"J. Cybersecur."},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Alfroy, T., Holterbach, T., Krenc, T., Claffy, K.C., and Pelsser, C. (2024, January 4\u20138). Next Generation of BGP Data Collection Platforms. Proceedings of the ACM SIGCOMM Conference 2024, Sydney, NSW, Australia.","DOI":"10.1145\/3651890.3672251"},{"key":"ref_35","unstructured":"Livadariu, I., Elmokashfi, A., and Dhamdhere, A. (2020, January 22\u201326). An agent-based model of IPv6 adoption. Proceedings of the 2020 IFIP Networking Conference (Networking), Paris, France."},{"key":"ref_36","unstructured":"(2025, July 21). Alexa Top 1,000,000 Sites. Available online: http:\/\/www.alexa.com\/topsites."},{"key":"ref_37","unstructured":"Strowes, S.D. (2017). Bootstrapping Active IPv6 Measurement with IPv4 and Public DNS. arXiv."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Fiebig, T., Borgolte, K., Hao, S., Kruegel, C., and Vigna, G. (2017). Something from Nothing (There): Collecting Global IPv6 Datasets from DNS. Passive and Active Measurement (PAM), Springer.","DOI":"10.1007\/978-3-319-54328-4_3"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Borgolte, K., Hao, S., Fiebig, T., and Vigna, G. (2018, January 21\u201323). Enumerating Active IPv6 Hosts for Large-Scale Security Scans via DNSSEC-Signed Reverse Zones. Proceedings of the 2018 IEEE Symposium on Security & Privacy, San Francisco, CA, USA.","DOI":"10.1109\/SP.2018.00027"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Gasser, O., Hof, B., Helm, M., Korczynski, M., Holz, R., and Carle, G. (2018). In Log We Trust: Revealing Poor Security Practices with Certificate Transparency Logs and Internet Measurements. Passive and Active Measurement Conference Proceedings, Springer.","DOI":"10.1007\/978-3-319-76481-8_13"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Fukuda, K., and Heidemann, J. (November, January 31). Who Knocks at the IPv6 Door?: Detecting IPv6 Scanning. Proceedings of the Internet Measurement Conference 2018, Boston, MA, USA.","DOI":"10.1145\/3278532.3278553"},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Nikkhah, M., Gu\u00e9rin, R., Lee, Y., and Woundy, R. (2011, January 6\u20139). Assessing IPv6 Through Web Access: A Measurement Study and Its Findings. Proceedings of the Seventh Conference on Emerging Networking Experiments and Technologies, Tokyo, Japan.","DOI":"10.1145\/2079296.2079322"},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"341","DOI":"10.7763\/IJFCC.2014.V3.323","article-title":"IPv6 Host Address Usage Survey","volume":"3","author":"Hu","year":"2014","journal-title":"Int. J. Future Comput. Commun."},{"key":"ref_44","unstructured":"(2025, July 20). University of Oregon RouteViews Project. Available online: https:\/\/www.routeviews.org\/routeviews\/."},{"key":"ref_45","unstructured":"Ripe NCC (2025, July 21). RIPE Routing Information Service (RIS). Available online: https:\/\/www.ripe.net\/analyse\/internet-measurements\/routing-information-service-ris\/."},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Fiebig, T., Borgolte, K., Shuang, H., Kruegel, C., Vigna, G., and Feldmann, A. (2018). In rDNS We Trust: Revisiting a Common Data-Source\u2019s Reliability. International Conference on Passive & Active Network Measurement Proceedings, Springer.","DOI":"10.1007\/978-3-319-76481-8_10"},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Ullrich, J., Kieseberg, P., Krombholz, K., and Weippl, E. (2015, January 24\u201327). On Reconnaissance with IPv6: A Pattern-Based Scanning Approach. Proceedings of the 2015 10th International Conference on Availability, Reliability and Security (ARES), Toulouse, France.","DOI":"10.1109\/ARES.2015.48"},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"1629","DOI":"10.1109\/TNET.2022.3145040","article-title":"DET: Enabling efficient probing of IPv6 active addresses","volume":"30","author":"Song","year":"2022","journal-title":"IEEE\/ACM TON Trans. Netw."},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Murdock, A., Li, F., Bramsen, P., Durumeric, Z., and Paxson, V. (2017, January 1\u20133). Target generation for internet-wide IPv6 scanning. Proceedings of the Internet Measurement Conference, London, UK.","DOI":"10.1145\/3131365.3131405"},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Zheng, G., Xu, X., and Wang, C. (2020, January 11\u201314). An Effective Target Address Generation Method for IPv6 Address Scan. Proceedings of the 2020 IEEE 6th International Conference on Computer and Communications (ICCC), Chengdu, China.","DOI":"10.1109\/ICCC51575.2020.9345025"},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1016\/j.comnet.2019.03.010","article-title":"6Tree: Efficient dynamic discovery of active addresses in the IPv6 address space","volume":"155","author":"Liu","year":"2019","journal-title":"Comput. Netw."},{"key":"ref_52","doi-asserted-by":"crossref","first-page":"108666","DOI":"10.1016\/j.comnet.2021.108666","article-title":"6Graph: A graph-theoretic approach to address pattern mining for Internet-wide IPv6 scanning","volume":"203","author":"Yang","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_53","doi-asserted-by":"crossref","unstructured":"Yang, T., Cai, Z., Hou, B., and Zhou, T. (2022, January 2\u20135). 6Forest: An ensemble learning-based approach to target generation for internet-wide IPv6 scanning. Proceedings of the IEEE INFOCOM 2022\u2014IEEE Conference on Computer Communications, London, UK.","DOI":"10.1109\/INFOCOM48880.2022.9796925"},{"key":"ref_54","doi-asserted-by":"crossref","unstructured":"Cui, T., Gou, G., and Xiong, G. (2020, January 11\u201314). 6GCVAE: Gated Convolutional Variational Autoencoder for IPv6 Target Generation. Proceedings of the Pacific-Asia Conference on Knowledge Discovery and Data Mining, Singapore.","DOI":"10.1007\/978-3-030-47426-3_47"},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Cui, T., Xiong, G., Gou, G., Shi, J., and Xia, W. (2020, January 14\u201318). 6VecLM: Language Modeling in Vector Space for IPv6 Target Generation. Proceedings of the European Conference on Machine Learning and Principles and Practice of Knowledge Discovery in Databases, Ghent, Belgium.","DOI":"10.1007\/978-3-030-67667-4_12"},{"key":"ref_56","doi-asserted-by":"crossref","unstructured":"Cui, T., Gou, G., Xiong, G., Liu, C., Fu, P., and Li, Z. (2021, January 10\u201313). 6GAN: IPv6 Multi-Pattern Target Generation via Generative Adversarial Nets with Reinforcement Learning. Proceedings of the IEEE Conference on Computer Communications, Vancouver, BC, Canada.","DOI":"10.1109\/INFOCOM42981.2021.9488912"},{"key":"ref_57","unstructured":"Gasser, O., Scheitle, Q., Foremski, P., Lone, Q., Korczy\u0144ski, M., Strowes, S.D., Hendrinks, L., and Carle, G. (November, January 31). Clusters in the Expanse: Understanding and Unbiasing IPv6 Hitlists. Proceedings of the IMC \u201818: Internet Measurement Conference, Boston, MA, USA."},{"key":"ref_58","doi-asserted-by":"crossref","first-page":"3870","DOI":"10.1109\/TNET.2024.3406508","article-title":"AddrMiner: A Fast, Efficient, and Comprehensive Global Active IPv6 Address Detection System","volume":"32","author":"Song","year":"2024","journal-title":"IEEE\/ACM TON Trans. Netw."},{"key":"ref_59","unstructured":"Gasser, O., Scheitle, Q., Gebhard, S., and Carle, G. (2025, July 21). IPv6 Hitlist Collection. Available online: http:\/\/www.net.in.tum.de\/pub\/ipv6-hitlist\/."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/16\/9\/727\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T18:32:17Z","timestamp":1760034737000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/16\/9\/727"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8,25]]},"references-count":59,"journal-issue":{"issue":"9","published-online":{"date-parts":[[2025,9]]}},"alternative-id":["info16090727"],"URL":"https:\/\/doi.org\/10.3390\/info16090727","relation":{},"ISSN":["2078-2489"],"issn-type":[{"type":"electronic","value":"2078-2489"}],"subject":[],"published":{"date-parts":[[2025,8,25]]}}}