AddrMiner: A Comprehensive Global Active IPv6 Address Discovery System
summary
AddrMiner is a deployed IPv6 probing system that discovers 2.1 billion active IPv6 addresses over 13 months (1.7B de‑aliased, 0.4B aliased) and covers 86.4K BGP prefixes (81.6% of probed prefixes). It splits address space into three scenarios and applies AddrMiner-N (organization‑association pattern mining for seedless regions), AddrMiner-F (similarity‑matching boosting hit rate by 70–150% for few‑seed regions), and AddrMiner-S (reinforcement‑learning / density guidance that nearly doubles hit rate for seed‑rich regions). The system and dataset are publicly released.
AI-written summary · about
chapters (10)
- 0:00AddrMiner and IPv6 challenges
- 2:25Key terms and IPv6 probing
- 6:19AddrMiner system design
- 7:45Organization strategy for regions
- 10:40Pattern library construction
- 12:31Similarity matching strategy
- 13:58Address density strategy
- 16:57Beyond RFC address patterns
- 17:43Global IPv6 probing results
- 18:48Contributions and conclusion
related talks
20mDiamond Miner: Comprehensive Discovery of the Internet's Topology Diamonds
41mInternet Spelunking: IPv6 Scanning and Device Fingerprinting
26mIPv6 for Programmers
32mActive Fault Finding in Networks
43mAttack or Noise?: Tracking and Evaluating the Impact of Internet-Wide Survey Scanners
22mAPT Attribution and DNS Profiling
43mWho are the people in your neighborhood? Tracking 'Shady' CIDR blocks
25mDefeating Spy Nodes on the Monero Network